https://bz.apache.org/bugzilla/show_bug.cgi?id=66440

            Bug ID: 66440
           Summary: The maximum effective value of SSLSessionCacheTimeout
                    is 3600
           Product: Apache httpd-2
           Version: 2.4.37
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: zhenying...@irs.gov
  Target Milestone: ---

When SSLSessionCacheTimeout is set to a value less than or equal to 3600, and
SSLVerifyClient is set to true, the log shows that the interval between
mod_ssl's verifying the client certificate is the value of
SSLSessionCacheTimeout.  When it is set to 5400 or lager, mod_ssl still
verifies the client certificate every 3600 seconds.  

In addition, SSLSessionCacheTimeout defined in virtual host doesn't overwrite
the value defined in ssl.conf.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to