Changeset 2246a84 in mod_gnutls for include


Ignore:
Timestamp:
Apr 21, 2018, 3:51:51 PM (2 years ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
debian/master, master, proxy-ticket
Children:
7921dc7
Parents:
fa6d0bb
Message:

Make automatic OCSP cache updates and fuzz time configurable

File:
1 edited

Legend:

Unmodified
Added
Removed
  • include/mod_gnutls.h.in

    rfa6d0bb r2246a84  
    214214    /* Enable OCSP stapling */
    215215    unsigned char ocsp_staple;
     216    /* Automatically refresh cached OCSP response? */
     217    unsigned char ocsp_auto_refresh;
    216218    /* Check nonce in OCSP responses? */
    217219    unsigned char ocsp_check_nonce;
     
    228230    /* If an OCSP request fails wait this long before trying again. */
    229231    apr_interval_time_t ocsp_failure_timeout;
     232    /** How long before a cached OCSP response expires should it be
     233     * updated? During configuration parsing this is set to the
     234     * maximum, during post configuration the value will be set to
     235     * half that. After each update the interval to for the next one
     236     * is choosen randomly as `ocsp_fuzz_time + ocsp_fuzz_time *
     237     * RANDOM` with `0 <= RANDOM <= 1`. */
     238    apr_interval_time_t ocsp_fuzz_time;
    230239    /* Socket timeout for OCSP requests */
    231240    apr_interval_time_t ocsp_socket_timeout;
Note: See TracChangeset for help on using the changeset viewer.