Changeset 9bc842e in mod_gnutls


Ignore:
Timestamp:
Jan 13, 2020, 6:55:56 AM (7 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
546bf35
Parents:
33fa7d5
Message:

Update documentation for GnuTLSOCSPResponseFile

File:
1 edited

Legend:

Unmodified
Added
Removed
  • doc/mod_gnutls_manual.md

    r33fa7d5 r9bc842e  
    631631### GnuTLSOCSPResponseFile
    632632
    633 Read the OCSP response for stapling from this file instead of sending
    634 a request over HTTP.
    635 
    636     GnuTLSOCSPResponseFile /path/to/response.der
     633Read OCSP responses for stapling from these files (one or more)
     634instead of sending a request over HTTP.
     635
     636    GnuTLSOCSPResponseFile /path/to/response.der [...]
    637637
    638638Default: *empty*\
    639639Context: server config, virtual host
    640640
    641 The response file must be updated externally, for example using a cron
    642 job. This option is an alternative to the server fetching OCSP
     641The first listed file must contain a response for the server
     642certificate, responses for intermediate CAs may be added in the order
     643they appear in [GnuTLSCertificateFile](#gnutlscertificatefile). You
     644can revert to the default fetch mechanism for a specific certificate
     645(including the server certificate) by giving the empty string (`""`)
     646instead of a file path.
     647
     648The response files must be updated externally, for example using a
     649cron job. This option is an alternative to the server fetching OCSP
    643650responses over HTTP. Reasons to use this option include:
    644651
    645 * Performing OCSP requests separate from the web server.
    646 * The issuer CA uses an access method other than HTTP.
     652* Performing OCSP requests separate from the web server (e.g. to share
     653  responses across a server cluster).
     654* The issuer CA uses an access method other than HTTP, or doesn't
     655  include an OCSP URL in the certificate.
    647656* Testing
    648657
Note: See TracChangeset for help on using the changeset viewer.