This directory contains pre-computed OCSP responses which are used by the input

scripts for TOCSP.  Most have been hand-edited to contain particular errors, and

in some cases then re-signed using the 'resign' utility.

(* signifies resigning was used)

The following are used in the Error.txt input script:

response.000     Original response, upon which other non-trivial responses are based

response.001     'malformedRequest'

response.002     'internalError'

response.003     'tryLater'

response.004     ..invalid responseStatus

response.005     'sigRequired'

response.006     'unauthorised'

response.007     ..invalid responseStatus

response.008     ..invalid responseStatus (-ve)

response.009     invalid RSA signature

response.010     corrupt RSA signature data (#unused bits not 0)

response.011*    invalid hashAlgorithm in CertId

response.012*    corrupt issuerNameHash in CertId

response.013*    corrupt issuerKeyHash in CertId

response.014*    corrupt serialNumber in CertId

response.015     hash algorithm specified in signature doesn't match that

                  used (which is specified before the signature)

                  - produced using a modified version of resign.exe

response.016     Invalid response type (outside signed data portion)

response.017*    Inserted 'version' field with value v1 (shouldn't be there since this is

                  the default value, and defaults are skipped in DER)

response.018*    As 017, but with unrecognised version value '1'.

response.019*    producedAt before thisUpdate

response.020*    Added nextUpdate field - one month after thisUpdate

response.021*    From 020, set producedAt > nextUpdate

response.022*    From 020, set thisUpdate > nextUpdate (producedAt < nextUpdate)

response.023*    From 020, set thisUpdate > nextUpdate (producedAt between the two)

response.024*    From 020, set thisUpdate > nextUpdate (producedAt > thisUpdate)

response.025*    Issuer name corrupted (doesn't match signing cert subject field)

response.026-030 Corrupt length fields (* on 29)

response.031-035 Corrupt tag fields (* on 32, 34)

The following are used in XCert.txt:

response.n1      Testing Nonce on, incorrect value / unexpected nonce received

response.n2      Testing Nonce on, response with missing nonce

The following are used in XCert-local.txt, in addition to those used in XCert.txt:

XCert_00_Good_RSA_XCert.rsp

XCert_01_Revoked_RSA_XCert.rsp

XCert_02_Suspended_RSA_XCert.rsp

XCert_03_Unknown_RSA_XCert.rsp

XCert_04_Good_DSA_XCert.rsp

XCert_05_Revoked_DSA_XCert.rsp

XCert_06_Suspended_DSA_XCert.rsp

XCert_07_Unknown_DSA_XCert.rsp

XCert_08_All_RSA_XCert.rsp

XCert_09_All_DSA_XCert.rsp

XCert_10_Expired_Subject_and_Issuer.rsp

XCert_11_Expired_Signing.rsp

XCert_12_Expired_Subject.rsp

XCert_13_Unspecified_Date.rsp

XCert_14_Expired_subject_valid_time.rsp

XCert_15_Expired_unspecified.rsp

XCert_16_Expired_specified.rsp

XCert_20_Nonce_Off.rsp

XCert_22_BadSig_DSA_XCert.rsp