Challenge PKI : 6.2. OCSP responder simulator settings without virtual hosts

6.2.1. Easy Setup


# 1. move into OCSP data directory of this testcase set.

% cd /usr/local/cpki/testcase/cpki2002jpki2/data/ocsp (default)

# 2. install data and scripts

% make install

You'll see data and CGIs for this testcase set in '/var/www/cgi-bin/cpki/ocsp' directory.

6.2.1. Setup manually

OCSP responder simulator will respond with the same response which has OCSP status regardless 'nonce' and 'serialNumber'. For this matrix tests, we need to set three simulator CGIs which responses has status 'good', 'revoked' and 'unknown' with the following URLs.


http://ocsp1/cgi-bin/cpki/ocsp/CR_EE_OK_2000691/simulator.cgi

http://ocsp1/cgi-bin/cpki/ocsp/CR_EE_RV_2000692/simulator.cgi

http://ocsp1/cgi-bin/cpki/ocsp/CR_EE_EX_2000693/simulator.cgi


% cd /var/www/cgi-bin/cpki/ocsp

% mkdir CR_EE_OK_2000691 CR_EE_EX_2000693 CR_EE_RV_2000692

% mkdir CR_EE_OK_2000691/data CR_EE_EX_2000693/data CR_EE_RV_2000692/data



% cd CR_EE_OK_2000691/data

% dbocspresgen --id=2000691 --db=cpki_jpki2 --out=z.res.cfg

% chmod 777 .

% cd ..

% cp /var/www/cgi-bin/cpki/cpki_simulator.cgi simulator.cgi

% cd ..



% cd CR_EE_RV_2000692/data

% dbocspresgen --id=2000692 --db=cpki_jpki2 --out=z.res.cfg

% chmod 777 .

% cd ..

% cp /var/www/cgi-bin/cpki/cpki_simulator.cgi simulator.cgi

% cd ..



% cd CR_EE_EX_2000693/data

% dbocspresgen --id=2000693 --db=cpki_jpki2 --out=z.res.cfg

% chmod 777 .

% cd ..

% cp /var/www/cgi-bin/cpki/cpki_simulator.cgi simulator.cgi

% cd ..

JNSA/IPA Challenge PKI Test Suite