osdir.com

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug 62400] New: OCSP Stapling should not serve OCSP responses from the cache even after they expire


https://bz.apache.org/bugzilla/show_bug.cgi?id=62400

            Bug ID: 62400
           Summary: OCSP Stapling should not serve OCSP responses from the
                    cache even after they expire
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@xxxxxxxxxxxxxxxx
          Reporter: tijay00@xxxxxxxxx
  Target Milestone: ---

SSLStapling On;
SSLStaplingStandardCacheTimeout 3600 (after one hour a new ocsp request is
being done by mod_ssl)

When the OCSP responses from the cache expire, it should go fetch a fresh OCSP
response from the OCSP responder even though it still has some cycles to hit
the SSLStaplingStandardCacheTimeout; but it keeps serving the expired response
from the cache.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: bugs-help@xxxxxxxxxxxxxxxx