Changes

Jump to: navigation, search

PSM:EV Testing Easy Version

672 bytes added, 23:02, 22 September 2014
Test Failure?
== Test Failure? ==
* The purpose of this test is to make sure you have set up EV according to the [https://www.cabforum.org/documents.html EV Guidelines], so make sure you have not taken short-cuts like issuing the test cert directly from the root.
* OCSP must work without error for the intermediate certificates. For more information see: https://wiki.mozilla.org/CA:EV_Revocation_Checking#Requirements
* The EV Policy OID in the end-entity and intermediate certificates must match the EV Policy OID that you enter. (Note: the intermediate cert can use the anyPolicy oid rather than the EV policy oid.)
* If the test website cannot be reached by the server hosting the tool, check to see if you have a firewall preventing access from Amazon EC2 instances.
 
== About the Testing Tool ==
The Testing Tool...
* Basically runs a program on a remote computer rather than the user's browser, so it should work with any browser/version.
 
* Does not interact with the user's profile, so the user does not need to import the root certificate in order to run the tool. The web server must serve up the intermediate cert(s) along with the end-entity cert.
 
* Runs on an [http://aws.amazon.com/ec2/ Amazon EC2 instance], so your test website must be accessible from Amazon EC2 instances.
Confirm, administrator
5,526
edits

Navigation menu