3 commits

Author	SHA1	Message	Date
Jon Siwek	565ad360c6	Add x509 canonifier to a unit test.	2015-02-03 17:04:26 -06:00
Johanna Amann	8f1cbb8b0a	Fix ocsp reply validation - there were a few things that definitely were wrong. ... Now the right signer certificate for the reply is looked up (and no longer assumed that it is the first one) and a few compares are fixed. Plus - there are more test cases that partially send certificates in the ocsp message and partially do not - and it seems to work fine in all cases. Addresses BIT-1212	2014-09-04 12:22:55 -07:00
Bernhard Amann	d9e7ac6e92	Add policy script adding ocsp validation to ssl.log	2014-05-16 11:21:26 -07:00