search

mozilla / tls-canary

DEPRECATED - TLS regression scanner for Firefox
https://tlscanary.mozilla.org/
Mozilla Public License 2.0
17 stars 15 forks source link

Adding OnceCRL revocations test and disabling sanity check #207

Closed cr closed 4 years ago

cr commented 4 years ago

This commit adds an integration test that checks whether TLS Canary can detect OneCRL revocations by running a regression test against a custom revocations.txt file that revokes the DigiCert Root CA.

Also we temporarily disable the OneCRL sanity check as long as BadSSL's outdated revocation test cert isn't renewed whcih seems to be taking its time.

cr commented 4 years ago

This fixes #205 with a temporary workaround, but we need to remember to re-enable the check once BadSSL renewed their cert.