Author: hiranya
Date: Wed Aug 7 19:09:36 2013
New Revision: 1511438
URL: http://svn.apache.org/r1511438
Log:
Updating documentation on OCSP/CRL - Applying patch from SYNAPSE-963
Modified:
synapse/trunk/java/modules/documentation/src/site/xdoc/userguide/transports.xml
Modified:
synapse/trunk/java/modules/documentation/src/site/xdoc/userguide/transports.xml
URL:
http://svn.apache.org/viewvc/synapse/trunk/java/modules/documentation/src/site/xdoc/userguide/transports.xml?rev=1511438&r1=1511437&r2=1511438&view=diff
==============================================================================
---
synapse/trunk/java/modules/documentation/src/site/xdoc/userguide/transports.xml
(original)
+++
synapse/trunk/java/modules/documentation/src/site/xdoc/userguide/transports.xml
Wed Aug 7 19:09:36 2013
@@ -212,6 +212,10 @@
<Password>password</Password>
</TrustStore>
</parameter>
+ <parameter name="CertificateRevocationVerifier">
+ <CacheSize>50</CacheSize>
+ <CacheDurationMins>5</CacheDurationMins>
+ </parameter>
</transportSender></div>
</subsection>
<subsection name="Transport listener parameters"
id="Transport_listener_parameters">
@@ -345,7 +349,7 @@
</dd>
</dl>
<p>Note that the HTTPS sender has no proxy
support yet.</p>
- <p>The following parameters are specific to the
HTTP sender:</p>
+ <p>The following parameters are specific to the
HTTPS sender:</p>
<dl>
<dt>
<tt>keystore</tt>
@@ -388,6 +392,24 @@
<a
href="../apidocs/org/apache/synapse/transport/nhttp/HostnameVerifier.html">HostnameVerifier
Javadoc</a>
for more details.
</dd>
+ <dt>
+ <tt>CertificateRevocationVerifier</tt>
+ </dt>
+ <dd>
+ This is an optional parameter to validate the
revocation status of the host
+ certificates using <a
href="http://www.ietf.org/rfc/rfc2560.txt";>OCSP</a> and
+ <a href="http://www.ietf.org/rfc/rfc5280.txt";>CRL</a>
when making HTTPS connections.
+ Simply uncomment this parameter in the axis2.xml file
to enable the feature.
+ Two LRU caches are used to cache CRLs and OCSP
responses until they are expired. "CacheSize"
+ property defines the maximum size of a cache. When
this limit is reached, the
+ old values will be automatically removed and updated
with new values. "CacheDurationMins"
+ is used to configure the time duration (in minutes)
between two consecutive
+ runs of the CacheManager task which periodically
performs housekeeping work
+ in each cache. Refer the example configuration above
to see how to configure
+ these properties. The scheduled CacheManager tasks for
OCSP and CRL caches can
+ be manually controlled using the JMX MBeans registered
under the "CacheController"
+ category.
+ </dd>
</dl>
</subsection>
</section>
