Changeset 0cd8f3d in mod_gnutls

Timestamp:

Oct 30, 2016, 5:01:42 PM (6 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

asyncio, debian/master, debian/stretch-backports, main, master, proxy-ticket, upstream

Children:

c39ae1a

Parents:

444e6ed

Message:

Update OCSP stapling documentation

File:

• doc/mod_gnutls_manual.mdwn (modified) (5 diffs)

doc/mod_gnutls_manual.mdwn

@@ -530 +530 @@
 ### GnuTLSOCSPStapling
 
-EXPERIMENTAL: Enable OCSP stapling for this (virtual) host.
+Enable OCSP stapling for this (virtual) host.
 
     GnuTLSOCSPStapling [On|Off]
@@ -556 +556 @@
 ### GnuTLSOCSPResponseFile
 
-EXPERIMENTAL: Read the OCSP response for stapling from this file
-instead of sending a request over HTTP
+Read the OCSP response for stapling from this file instead of sending
+a request over HTTP.
 
     GnuTLSOCSPResponseFile /path/to/response.der
@@ -575 +575 @@
 ### GnuTLSOCSPGraceTime
 
-EXPERIMENTAL: Replace cached OCSP responses this many seconds before
-they expire.
+Replace cached OCSP responses this many seconds before they expire.
 
     GnuTLSOCSPGraceTime SECONDS
@@ -585 +584 @@
 A cached OCSP response should be updated a little before it expires to
 account for potential clock skew between server, CA, and client, as
-well as transmission time in corner cases.
+well as transmission time in corner cases. Note that a response
+without a `nextUpdate` field will be subject to the default cache
+lifetime.
 
 ### GnuTLSOCSPFailureTimeout
 
-EXPERIMENTAL: Wait this many seconds before retrying a failed OCSP request.
+Wait this many seconds before retrying a failed OCSP request.
 
     GnuTLSOCSPFailureTimeout SECONDS
@@ -604 +605 @@
 ### GnuTLSOCSPSocketTimeout
 
-EXPERIMENTAL: Timeout for TCP sockets used to send OCSP requests
+Timeout for TCP sockets used to send OCSP requests
 
     GnuTLSOCSPFailureTimeout SECONDS