Changeset 70a1e5a in mod_gnutls for src/gnutls_hooks.c

Timestamp:
Jun 9, 2016, 5:08:30 PM (4 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, master, proxy-ticket, upstream
Children:
3e22b82
Parents:
f450ac9
Message:

Introduce OCSP caching grace time

A cached OCSP response must be updated before it expires, or time skew
might cause a client to receive a response it considers expired. In
some corner cases even network transmission delay might have the same
effect. To prevent this problem let the response cache entry expire a
configurable grace time before the response does, so a fresh response
will be fetched.

(No files)

Note: See TracChangeset for help on using the changeset viewer.