Changeset 33fa7d5 in mod_gnutls for test/tests/00_basic/apache.conf


Ignore:
Timestamp:
Jan 12, 2020, 4:34:33 PM (8 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
9bc842e
Parents:
5c9ca6b
Message:

Ensure stapling is active for server certificates with "must-staple"

RFC 7633, 4.3.2:

A server SHOULD verify that its configuration is compatible with the
TLS feature extension expressed in a certificate it presents.

File:
1 edited

Legend:

Unmodified
Added
Removed

  • test/tests/00_basic/apache.conf

    r5c9ca6b r33fa7d5  
    66 ServerName ${TEST_HOST}
    77 GnuTLSEnable On
    8  GnuTLSCertificateFile  authority/subca/server/x509-chain.pem
    9  GnuTLSKeyFile          authority/subca/server/secret.key
     8 GnuTLSCertificateFile  authority/server/x509-chain.pem
     9 GnuTLSKeyFile          authority/server/secret.key
    1010</VirtualHost>
Note: See TracChangeset for help on using the changeset viewer.