https://bz.apache.org/bugzilla/show_bug.cgi?id=60182

--- Comment #9 from [email protected] ---
mod_md OCSP stapling looks good. Only the authoritative responses are sent and
the chances of being affected by outage are much smaller then with the mod_ssl
module OCSP stapling. Too bad that it will take a while for this to land in LTS
distributions.

About mod_ssl:
There is one other point in the mod_ssl module where I think
ReturnResponderErrors off should have the effect of suppressing a probably
invalid OCSP staple:
https://github.com/apache/httpd/blob/c9d6d9e5abc82192b10bd7d5f32a560685c69990/modules/ssl/ssl_util_stapling.c#L400

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to