Changeset 78b75b3 in mod_gnutls for src/mod_gnutls.c


Ignore:
Timestamp:
Jun 16, 2016, 6:49:25 PM (3 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, master, upstream
Children:
87d507b
Parents:
a784735
git-author:
Thomas Klute <thomas2.klute@…> (06/16/16 18:49:02)
git-committer:
Thomas Klute <thomas2.klute@…> (06/16/16 18:49:25)
Message:

Restore GnuTLSOCSPResponseFile option

Using an externally updated response file avoids the blocking issues
the OCSP client implementation currently has, so it is good to have
both options.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/mod_gnutls.c

    ra784735 r78b75b3  
    273273    "MACs, compression)."),
    274274    AP_INIT_FLAG("GnuTLSOCSPStapling", mgs_ocsp_stapling_enable,
    275                  NULL,
    276                  RSRC_CONF,
     275                 NULL, RSRC_CONF,
    277276                 "EXPERIMENTAL: Enable OCSP stapling"),
    278277    AP_INIT_TAKE1("GnuTLSOCSPResponseFile", mgs_store_ocsp_response_path,
    279     NULL,
    280     RSRC_CONF,
    281     "EXPERIMENTAL: OCSP response for stapling (must be updated externally)"),
     278                  NULL, RSRC_CONF,
     279                  "EXPERIMENTAL: Read OCSP response for stapling from this "
     280                  "file instead of sending a request over HTTP (must be "
     281                  "updated externally)"),
    282282    AP_INIT_TAKE1("GnuTLSOCSPGraceTime", mgs_set_timeout,
    283     NULL,
    284     RSRC_CONF,
    285     "EXPERIMENTAL: Replace cached OCSP responses this many seconds before "
    286     "they expire"),
     283                  NULL, RSRC_CONF,
     284                  "EXPERIMENTAL: Replace cached OCSP responses this many "
     285                  "seconds before they expire"),
    287286#ifdef __clang__
    288287    /* Workaround for this clang bug:
Note: See TracChangeset for help on using the changeset viewer.