On Do, 2014-01-02 at 19:34 -0800, Julien Pierre wrote: > The new OCSP stapling tests in NSS 3.15.3 are all failing on our Solaris > machines. See error log below. > We have a slightly smaller number of failures on Linux. > > Are these tests going out to a public OCSP responder on the Internet ?
For most of the errors you cited: No, see https://bugzilla.mozilla.org/show_bug.cgi?id=811331 There are few errors that are indeed attempting to connect to the public web, but those will be removed in 3.15.4: https://bugzilla.mozilla.org/show_bug.cgi?id=936778 > Or are they trying to go to a locally built one ? Yes, most of them are. Since 3.15 httpserv has the ability to run as an OCSP server. Kai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto