Kai,

On 1/3/2014 02:40, Kai Engert wrote:
On Do, 2014-01-02 at 19:34 -0800, Julien Pierre wrote:
The new OCSP stapling tests in NSS 3.15.3 are all failing on our Solaris
machines. See error log below.
We have a slightly smaller number of failures on Linux.

Are these tests going out to a public OCSP responder on the Internet ?
For most of the errors you cited:
No, see https://bugzilla.mozilla.org/show_bug.cgi?id=811331
OK, thanks.
There are few errors that are indeed attempting to connect to the public
web, but those will be removed in 3.15.4:
https://bugzilla.mozilla.org/show_bug.cgi?id=936778

Or are they trying to go to a locally built one ?
Yes, most of them are. Since 3.15 httpserv has the ability to run as an
OCSP server.


I see. This last bug might explain the failures we still see on Linux, but not the failures on Solaris. I guess there will be a new bug filed for these soon.

--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to