Changeset 33fa7d5 in mod_gnutls for test/authority

Timestamp:

Jan 12, 2020, 4:34:33 PM (2 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

9bc842e

Parents:

5c9ca6b

Message:

Ensure stapling is active for server certificates with "must-staple"

RFC 7633, 4.3.2:

A server SHOULD verify that its configuration is compatible with the
TLS feature extension expressed in a certificate it presents.

File:

• test/authority/subca/server/template.in (modified) (1 diff)

test/authority/subca/server/template.in

@@ -5 +5 @@
 encryption_key
 dns_name="__HOSTNAME__"
+# must-staple
+tls_feature = 5
 __OCSP_URI__
 __IP_ADDRESSES__