Merge pull request #9761 from julek-wolfssl/ocsp-responder

Implement OCSP responder

Author: JacobBarthelmeh

.github/workflows/os-check.yml

@@ -90,6 +90,7 @@ jobs:
           '--enable-all CPPFLAGS=''-DNO_WOLFSSL_SERVER -DWOLFSSL_NO_CLIENT_AUTH''',
           '--enable-curve25519=nonblock --enable-ecc=nonblock --enable-sp=yes,nonblock CPPFLAGS="-DWOLFSSL_PUBLIC_MP -DWOLFSSL_DEBUG_NONBLOCK"',
           '--enable-certreq --enable-certext --enable-certgen --disable-secure-renegotiation-info CPPFLAGS="-DNO_TLS"',
+          '--enable-ocsp --enable-ocsp-responder --enable-ocspstapling',
         ]
     name: make check
     if: github.repository_owner == 'wolfssl'

.gitignore

@@ -70,6 +70,7 @@ examples/sctp/sctp-client
 examples/sctp/sctp-client-dtls
 examples/asn1/asn1
 examples/pem/pem
+examples/ocsp_responder/ocsp_responder
 server_ready
 snifftest
 output

IDE/WIN/user_settings.h

@@ -40,6 +40,11 @@
     #define HAVE_CRL
     #define HAVE_CRL_MONITOR
 
+    #define HAVE_OCSP
+    #define HAVE_OCSP_RESPONDER
+    #define WOLFSSL_CERT_GEN
+    #define HAVE_CERTIFICATE_STATUS_REQUEST
+
     #if defined(WOLFSSL_LIB)
         /* The lib */
         #define OPENSSL_EXTRA

certs/ocsp/include.am

@@ -14,26 +14,46 @@ EXTRA_DIST += \
         certs/ocsp/openssl.cnf \
         certs/ocsp/renewcerts-for-test.sh \
         certs/ocsp/intermediate1-ca-key.pem \
+        certs/ocsp/intermediate1-ca-key.der \
         certs/ocsp/intermediate1-ca-cert.pem \
+        certs/ocsp/intermediate1-ca-cert.der \
         certs/ocsp/intermediate2-ca-key.pem \
+        certs/ocsp/intermediate2-ca-key.der \
         certs/ocsp/intermediate2-ca-cert.pem \
+        certs/ocsp/intermediate2-ca-cert.der \
         certs/ocsp/intermediate3-ca-key.pem \
+        certs/ocsp/intermediate3-ca-key.der \
         certs/ocsp/intermediate3-ca-cert.pem \
+        certs/ocsp/intermediate3-ca-cert.der \
         certs/ocsp/ocsp-responder-key.pem \
+        certs/ocsp/ocsp-responder-key.der \
         certs/ocsp/ocsp-responder-cert.pem \
+        certs/ocsp/ocsp-responder-cert.der \
         certs/ocsp/server1-key.pem \
+        certs/ocsp/server1-key.der \
         certs/ocsp/server1-cert.pem \
+        certs/ocsp/server1-cert.der \
         certs/ocsp/server1-chain-noroot.pem \
         certs/ocsp/server2-key.pem \
+        certs/ocsp/server2-key.der \
         certs/ocsp/server2-cert.pem \
+        certs/ocsp/server2-cert.der \
         certs/ocsp/server3-key.pem \
+        certs/ocsp/server3-key.der \
         certs/ocsp/server3-cert.pem \
+        certs/ocsp/server3-cert.der \
         certs/ocsp/server4-key.pem \
+        certs/ocsp/server4-key.der \
         certs/ocsp/server4-cert.pem \
+        certs/ocsp/server4-cert.der \
         certs/ocsp/server5-key.pem \
+        certs/ocsp/server5-key.der \
         certs/ocsp/server5-cert.pem \
+        certs/ocsp/server5-cert.der \
         certs/ocsp/root-ca-key.pem \
+        certs/ocsp/root-ca-key.der \
         certs/ocsp/root-ca-cert.pem \
+        certs/ocsp/root-ca-cert.der \
         certs/ocsp/root-ca-crl.pem \
         certs/ocsp/test-response.der \
         certs/ocsp/test-response-rsapss.der \