-
Type: Improvement
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
The remaining work in this ticket is to implement this section of the OCSP tests for macOS (and Windows):
Until SPEC-1589 and SPEC-1645 are resolved, drivers can only test with ECDSA certificates on Linux and thus, on Windows and macOS, drivers can only test with RSA certificates. Therefore, when testing on Windows and macOS, each column in the test matrix that utilizes an OCSP responder represents only two tests: 1. A test with RSA certificates and an OCSP responder that uses the issuing CA's certificate 2. A test with RSA certificates and an OCSP responder that uses a delegate certificate Additionally, because the Windows and macOS mongod do not support stapling when a client connects, the following sets of tests will be identical even if a driver supports stapled OCSP: {Test 1, Test 3} and {Test 2, Test 4}. Therefore, when testing on Windows and macOS, a driver MAY skip Test 1 and Test 2 if desired. A driver MAY also simply choose to run all the tests in the table, irrespective of OS, in order to simplify the testing procedure.
- depends on
-
PYTHON-2093 OCSP Support
- Closed
-
PYTHON-2140 Test PyOpenSSL support on macOS
- Closed
- is duplicated by
-
MOTOR-563 Ensure OCSP is fully tested
- Closed
-
PYTHON-2290 Ensure OCSP is fully tested
- Closed
- is related to
-
PYTHON-2147 OCSP callback should use the verified peer certificate chain to find the cert issuer
- Closed
-
PYTHON-2280 Investigate slow OCSP endpoint checks on Windows
- Closed
(1 is related to)