Changeset f064d74 in mod_gnutls

Timestamp:

Nov 24, 2019, 2:08:13 PM (11 days ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

master

Children:

dcec209

Parents:

829490c

Message:

Handbook: Add a section about module dependencies on socache

File:

• doc/mod_gnutls_manual.mdwn (modified) (2 diffs)

doc/mod_gnutls_manual.mdwn

@@ -45 +45 @@
 
     LoadModule gnutls_module modules/mod_gnutls.so
+
+Module Dependencies
+-------------------
+
+`mod_gnutls` uses the Apache HTTPD [Shared Object
+Cache](http://httpd.apache.org/docs/current/en/socache.html) to cache
+[OCSP responses for OCSP stapling](#gnutlsocspcache) and [TLS
+sessions](#gnutlscache). To use either cache you need to load a
+suitable `mod_socache_PROVIDER` module, which should be provided by
+your Apache installation.
+
+It is recommended to load at least `mod_socache_shmcb`. If that module
+is loaded `mod_gnutls` will [enable OCSP stapling by
+default](#gnutlsocspstapling), without needing any further
+configuration other than a [certificate chain](#gnutlscertificatefile)
+with OCSP support.
 
 Note on HTTP/2
@@ -325 +341 @@
 certificate, and optionally those of the issuing Certificate
 Authorities (CAs). If the file contains multiple certificates they
-should be ordered from EE to the CA closest to the root CA (or the
-root CA itself).
+must be ordered from EE to the CA closest to the root CA (or the root
+CA itself).
 
 Including at least the immediately issuing CA is highly recommended