[
https://issues.apache.org/jira/browse/TS-3216?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14618126#comment-14618126
]
bettydramit commented on TS-3216:
---------------------------------
[~masaori] With hpkp-003.patch
ssl_multicert.config
{code}
dest_ip=* ssl_cert_name=test.crt ssl_key_name=test.key hpkp_enabled=1
hpkp_max_age=300 hpkp_include_subdomains=1 hpkp_backup_csr_filename=test.csr
{code}
start ats
{code}
[Jul 8 15:14:12.385] Server {0x2ae6de051180} NOTE: loading SSL certificate
configuration from /etc/trafficserver/ssl_multicert.config
[Jul 8 15:14:12.387] Server {0x2ae6de051180} ERROR: fail to read csr from
'/etc/trafficserver/www.test.csr'
[Jul 8 15:14:12.387] Server {0x2ae6de051180} ERROR: fail to generate backup
pin for HPKP
[Jul 8 15:14:12.434] Server {0x2ae6de051180} NOTE: traffic server running
[Jul 8 15:14:12.563] Server {0x2ae6df688700} NOTE: cache enabled
{code}
> Add HPKP (Public Key Pinning Extension for HTTP) support
> --------------------------------------------------------
>
> Key: TS-3216
> URL: https://issues.apache.org/jira/browse/TS-3216
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Reporter: Masaori Koshiba
> Labels: review
> Fix For: 6.1.0
>
> Attachments: hpkp-001.patch, hpkp-002.patch, hpkp-003.patch
>
>
> Add "Public Key Pinning Extension for HTTP" Support in Traffic Server.
> RFC 7469 Public Key Pinning Extension for HTTP
> - https://tools.ietf.org/html/rfc7469
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
