Skip to content
GitLab
  1. 01 Nov, 2015 1 commit
    • Kaspar Brand's avatar
      For the "SSLStaplingReturnResponderErrors off" case, make sure to only · 0781f242
      Kaspar Brand authored 
      staple responses with certificate status "good". Also avoids including
inaccurate responses when the OCSP responder is not completely up
to date in terms of the CA-issued certificates (and provides interim
"unknown" or "extended revoked" [RFC 6960] status replies).

Log a certificate status other than "good" in stapling_check_response().

Propagate the "ok" status from stapling_check_response() back via both
stapling_renew_response() and get_and_check_cached_response() to the
callback code in stapling_cb(), enabling the decision whether to include
or skip the response.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711728 13f79535-47bb-0310-9956-ffa450edef68
      0781f242
  3. 31 Oct, 2015 1 commit
  5. 30 Oct, 2015 6 commits
  7. 29 Oct, 2015 2 commits
  9. 28 Oct, 2015 4 commits
  11. 27 Oct, 2015 2 commits
  13. 26 Oct, 2015 6 commits
  15. 25 Oct, 2015 3 commits
  17. 24 Oct, 2015 3 commits
  19. 23 Oct, 2015 3 commits
  21. 22 Oct, 2015 4 commits
  23. 20 Oct, 2015 3 commits
  25. 17 Oct, 2015 2 commits