On Do, 2014-01-02 at 19:34 -0800, Julien Pierre wrote: 
> The new OCSP stapling tests in NSS 3.15.3 are all failing on our Solaris 
> machines. See error log below.
> We have a slightly smaller number of failures on Linux.
> 
> Are these tests going out to a public OCSP responder on the Internet ? 

For most of the errors you cited:
No, see https://bugzilla.mozilla.org/show_bug.cgi?id=811331

There are few errors that are indeed attempting to connect to the public
web, but those will be removed in 3.15.4:
https://bugzilla.mozilla.org/show_bug.cgi?id=936778

> Or are they trying to go to a locally built one ?

Yes, most of them are. Since 3.15 httpserv has the ability to run as an
OCSP server.

Kai


-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to