------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1466
           Summary: Support entire certificate chain for OCSP stapling
           Product: Exim
           Version: 4.82
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: security
          Priority: low
         Component: TLS
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


The original OCSP RFC, 6066, provides for a single OCSP proof (for the server
certificate).  A later RFC, https://www.ietf.org/rfc/rfc6961.txt specifies a
TLS extension for multiple certificate status requests.   We should consider
supporting it.

Concerns include the resulting size and overhead of the TLS startup; suggested
mitigation includes caching.

See also:
http://www.ietf.org/mail-archive/web/tls/current/msg09566.html
http://bugs.exim.org/show_bug.cgi?id=1459


-- 
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim 
details at http://www.exim.org/ ##

Reply via email to