From cabcc465fc6a44dec4843f2a1ad459a706c5bfee Mon Sep 17 00:00:00 2001
From: Paul Kehrer <paul.l.kehrer@gmail.com>
Date: Thu, 23 Sep 2021 20:09:41 +0800
Subject: [PATCH] add several OCSP response vectors (#6298)

* add several OCSP response vectors

* fix naming
---
 docs/development/test-vectors.rst                 |   6 ++++++
 .../x509/ocsp/resp-response-type-unknown-oid.der  | Bin 0 -> 492 bytes
 .../ocsp/resp-successful-no-response-bytes.der    | Bin 0 -> 5 bytes
 .../x509/ocsp/resp-unknown-response-status.der    |   2 ++
 4 files changed, 8 insertions(+)
 create mode 100644 vectors/cryptography_vectors/x509/ocsp/resp-response-type-unknown-oid.der
 create mode 100644 vectors/cryptography_vectors/x509/ocsp/resp-successful-no-response-bytes.der
 create mode 100644 vectors/cryptography_vectors/x509/ocsp/resp-unknown-response-status.der

diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst
index 20f246cf6..4466647b1 100644
--- a/docs/development/test-vectors.rst
+++ b/docs/development/test-vectors.rst
@@ -569,6 +569,12 @@ X.509 OCSP Test Vectors
   ``CT Certificate SCTs`` single extension, from the SwissSign OCSP responder.
 * ``x509/ocsp/ocsp-army.deps.mil-resp.der`` - An OCSP response containing
   multiple ``SINGLERESP`` values.
+* ``x509/ocsp/resp-response-type-unknown-oid.der`` - An OCSP response with
+  an unknown OID for response type. The signature on this response is invalid.
+* ``x509/ocsp/resp-successful-no-response-bytes.der`` - An OCSP request with
+  a successful response type but the response bytes are missing.
+* ``x509/ocsp/resp-unknown-response-status.der`` - An OCSP response with an
+  unknown response status.
 
 Custom X.509 OCSP Test Vectors
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
diff --git a/vectors/cryptography_vectors/x509/ocsp/resp-response-type-unknown-oid.der b/vectors/cryptography_vectors/x509/ocsp/resp-response-type-unknown-oid.der
new file mode 100644
index 0000000000000000000000000000000000000000..4ce88f5327ea6b1c35bb7f00b7a6c570c3636d20
GIT binary patch
literal 492
zcmXqLVtm2H$grS^@u5Kz<6SmxZ8k<$R(1o%=C%NqCdM;B!4n3J8yAVOi10Tg$}|}!
zUe(ul-s@(uMd#tMn~x;;jSLJe3@nTd4b4p~4K1S#8e0t-n+!Y+IN4aW`IwocSQ%JE
z1mc%fHE_(`sy^TJTr;<G$GpYId9j<vB*3^{?)Tleb(}#)+$#UFLo*f%g6%Lfurx3-
zGBmO<v53O3bOA(-1yGH-p}Bzx$Q`_FoLX%jZQpqr8M#>*n41_G8Foak<}5F}d-TGN
zUKbbE6TA~8f=o>#?;Kg!Ch_FLtwr@>Z=FmJ@qfQ&wxhnHrDFl(?sZH7#|(>XZ%3UG
z{;>I@5Epwu!fMTv>k{9Vtv%VHdMkeu$I~+1-#JD)Tu=9;Cm8SNwdt*2!JItZ(14}&
zg6pDC$1h8J;ulU>w28y^@~5OrUmae*)p!_lcWJ-O$FjxQ51)Fv<(&!q)Zntgr(jb-
zd-&CM(;&k_i>tew_ZH7dXA?eg?ePnzv*|HG8zT+07jb<SF5qNv6FJ_&;BaQ@4MmCR
z-rVg*cPlQ}&6NnfmiYYTogM3zE!O-{ax!pDNX!+ztGRyC%al)XuYU5wv`sTh*5x7q
D_aMQ|

literal 0
HcmV?d00001

diff --git a/vectors/cryptography_vectors/x509/ocsp/resp-successful-no-response-bytes.der b/vectors/cryptography_vectors/x509/ocsp/resp-successful-no-response-bytes.der
new file mode 100644
index 0000000000000000000000000000000000000000..60ac1f76854fcc1148f1146c512713607b731f04
GIT binary patch
literal 5
McmXqD=3-<300AKYKL7v#

literal 0
HcmV?d00001

diff --git a/vectors/cryptography_vectors/x509/ocsp/resp-unknown-response-status.der b/vectors/cryptography_vectors/x509/ocsp/resp-unknown-response-status.der
new file mode 100644
index 000000000..e96966ef1
--- /dev/null
+++ b/vectors/cryptography_vectors/x509/ocsp/resp-unknown-response-status.der
@@ -0,0 +1,2 @@
+0
+

\ No newline at end of file