OCSP Response Test

Instructions for testing the handling of malformed OCSP responses on a Symbian device:

Clear the log on the server by selecting this link
Go to "UI Menu -> Tools -> App. Manager -> Options -> Settings" on the device
Then set "Online Certificate Check -> Must be passed" and enter the URL "http://www.peterharper.info/cgi-bin/ocsp/nph-test.cgi?run=" into the "Default web address" field
- If you're looking at this page in an S60 phone you can copy this URL to the clipboard by selecting "Options -> Find -> Web address"
- Select the above URL and select "Options -> Copy"
- Then long-press the pencil button thingy to paste the URL into the "Default web address" field
If you're using the emulator make sure that you set up the LAN connection in the emulator environment properly
Start installing a sis package
Link to sis and sisx
Hopefully it should work as expected (not panic). Check the log here to see if a response was actually sent
There are 10 responses. Repeat the test for each response. Next response will be 1/10

Notes:

Click the following links to examine the contents of the responses: 3 2 4 8 7 5 1 6 9 10
Here's a SIS file to use, although any should work okay?
The "run" parameter returns the contents of the next response, pass a number to return a specific response, e.g. the URL "http://www.peterharper.info/cgi-bin/ocsp/nph-test.cgi?run=3". With no parameters it just returns the next, e.g. 1. This is incremented each time
You can also use this "tool" to check whether the HTTP OCSP request from the device uses the correct HTTP_USER_AGENT header. Just check whether the device is identified in the request using the log.
I've had problems with the Vodafone Live firewall - use a plain internet GPRS access point instead.