]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
* modules/ssl/ssl_util_stapling.c (stapling_check_response) Don't stop
authorRuediger Pluem <rpluem@apache.org>
Wed, 18 Mar 2020 11:28:40 +0000 (11:28 +0000)
committerRuediger Pluem <rpluem@apache.org>
Wed, 18 Mar 2020 11:28:40 +0000 (11:28 +0000)
commit5699abfec6e506bcca7e814a566e593a95ed1e9b
tree0de3e16a62ea2e12739d855b680c0ffebcb770dd
parentf876ad95c319346e665c4bf18847f331b84721b4
* modules/ssl/ssl_util_stapling.c (stapling_check_response) Don't stop
  Certificate Revoked messages.

  Certificate Revoked Responder messages don't belong to 'error' class.
  When the server receives one, it MUST be passed on to the client.
  And stored for the normal period of basic responses.

  Also don't log an error each time it is retrieved from cache,
  only once when it is retrieved from the OCSP responder.

PR: 60182
Obtained from: https://github.com/apache/httpd/commit/7db9795f45fd4688ceb13ee36090e4e2becbc709.diff
Submitted by: <gmoniker@gmail.com>
Reviewed by: rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1875355 13f79535-47bb-0310-9956-ffa450edef68
modules/ssl/ssl_util_stapling.c