Add a five second timeout to OCSP responder requests in schannel, as is recommended in the OCSP spec. This was done for OpenSSL in CDRIVER-3739.
The default timeout was the cause frequent test failures in Client Side Encryption tests in the /client_side_encryption/basic test.
Original ticket summary: /client_side_encryption/basic failures on Windows
Original ticket description:
With log messages like this:
[2020/03/13 11:42:33.388] test error in: C:\data\mci\9cdd471b128edd4f870699963532dbc4\mongoc\src\libmongoc\tests\json-test-operations.c 574:check_result() [2020/03/13 11:42:33.388] Error in "Insert with deterministic encryption, then find it" test : expected 1 keys, not 0 [2020/03/13 11:42:33.388] Expected: [2020/03/13 11:42:33.388] { "0" : { "_id" : 1, "encrypted_string" : "string0" } } [2020/03/13 11:42:33.388] Actual: [2020/03/13 11:42:33.388] { } [2020/03/13 11:42:33.397] Begin /client_side_encryption/basic, seed 1584113505 [2020/03/13 11:42:33.397] { "status": "fail", "test_file": "/client_side_encryption/basic", "seed": "1584113505", "start": 534.869704, "end": 564.229704, "elapsed": 29.360000 },
Though other Client Side Encryption spec tests pass...
- depends on
-
SERVER-47934 Create a setParameter to control the OCSP HTTP client timeout
- Closed