Confirm, administrator
5,526
edits
Changes
Added errors and explanations for new tool
The purpose of this test is to make sure you have set up EV according to the [https://www.cabforum.org/documents.html EV Guidelines], so make sure you have not taken short-cuts like issuing the test cert directly from the root.
* If you get [https://github.com/mozilla/tls-observatory/issues/179 ''Error: TypeError: json.analysis is undefined''], then the program does not like the format of the data you entered. For instance, if you have extra spaces or characters before or after the test site domain. Or extra spaces before or after the Policy OID or PEM data.
* If you get ''Error: Could not initiate scan: Server error. Status: 429 Too Many Requests'', then wait for 3 minutes before trying again. TLS Observatory allows one scan per target every 3 minutes, so you will get this error if you test multiple times too quickly.
* The EV test only uses the root certificate it is given. So, if you are using an intermediate certificate that has been cross-signed with another root certificate, you may see different results when browsing to the site in Firefox, as opposed to the results provided by the EV Test.
* OCSP must work without error for the intermediate certificates. For more information see: https://wiki.mozilla.org/CA:EV_Revocation_Checking#Requirements
