RE: OCSP nonce was: RE: cvs commit: openssl/ssl s3_lib.c ssl.hssl_algs.cssl_ciph.cssl_locl.h tls1.h

[Florian Oelmaier]

> So you are precomputing the OCSP responses for *every* certificate every
> two minutes? Yes that would require that you only have a small number of
> certificates. It would also require that you prohibit multiple queries
> in a request otherwise the number of responses you would need to
> precompute could get rather large.

Are there any clients out there doing multi-certificate OCSP-requests?

And - to contribute to that past-expierience thing - responders tend to
behave more weird for multi-certificate OCSP-requests!

ciao, Fl0

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]