Changeset 333bbc7 in mod_gnutls for src/mod_gnutls.c

Timestamp:

Oct 27, 2016, 5:50:18 PM (4 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, proxy-ticket, upstream

Children:

0a02378

Parents:

c6dda6d

Message:

Configurable OCSP socket timeout

Stalled OCSP requests must time out after a while to prevent stalling
the server too much. However, if the timeout is too short requests may
fail with a slow OCSP responder or high latency network
connection. Using the new GnuTLSOCSPFailureTimeout parameter users can
adjust the timeout if necessary.

All macros defining default values for OCSP related times are now
collected in gnutls_ocsp.h.

File:

• src/mod_gnutls.c (modified) (1 diff)

src/mod_gnutls.c

@@ -288 +288 @@
                   "EXPERIMENTAL: Wait this many seconds before retrying a "
                   "failed OCSP request"),
+    AP_INIT_TAKE1("GnuTLSOCSPSocketTimeout", mgs_set_timeout,
+                  NULL, RSRC_CONF,
+                  "EXPERIMENTAL: Socket timeout for OCSP requests"),
 #ifdef __clang__
     /* Workaround for this clang bug: