[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

Dennis Wilson  changed:

   What|Removed |Added

Version|2.5-HEAD|2.4.25

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

Dennis Wilson  changed:

   What|Removed |Added

  Attachment #34250|0   |1
is obsolete||

--- Comment #10 from Dennis Wilson  ---
Created attachment 34719
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34719=edit
2.4.25 ocsp mod diff file

This mod file shows the changes to add OCSP capabilities to Apache 2.4.25.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #9 from jfclere  ---
merged in trunk http://svn.apache.org/r1781575
I wil propose back port once enough feedback.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

jfclere  changed:

   What|Removed |Added

 CC||jfcl...@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #8 from Dennis Wilson  ---
Created attachment 34250
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34250=edit
2.4.23 ocsp mod diff file

Attached is the diff file I used to patch apache 2.4.23.  I have tested it on
an Oracle Solaris 10 system.  I cannot guarantee it will work on other
platforms, but the code addition/change is the same since 2.4.10.  There is
probably a better way to just apply the diff file, but I always edit the files
manually just to make sure the edits are where I want them.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

Thijs Kinkhorst  changed:

   What|Removed |Added

 CC||th...@debian.org

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #7 from Thijs Kinkhorst  ---
I've uploaded a version of the original patch that applies against 2.4.10 (in
Debian Jessie) which we've been running without trouble for a longer while
already. It also applies against 2.3.23.

We need this change in order to be able to use OCSP with client certificate
authentication. It would be really useful to us if it could be merged.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://bz.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #6 from Thijs Kinkhorst  ---
Created attachment 34248
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34248=edit
Patch updated for 2.4.10 (and 2.4.23).

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037

Jeremy Faircloth jer...@faircloths.com changed:

   What|Removed |Added

 CC||jer...@faircloths.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037

dedec...@etud.insa-toulouse.fr changed:

   What|Removed |Added

 Status|NEW |NEEDINFO

--- Comment #5 from dedec...@etud.insa-toulouse.fr ---
Hello, 
I need this patch to use my own ocsp responder which signed responses with its
own self signed certificate and I see that this bug is not already fixed.
(There is no SSLOCSPResponderCertificateFile directive) 

Is there a possibility to get a binary of an Apache 2.4 fixed with this patch ?

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #3 from Dennis Wilson drwilso...@gmail.com ---
Created attachment 30622
  -- https://issues.apache.org/bugzilla/attachment.cgi?id=30622action=edit
Capability to Trust OCSP Responder Self-Signed Certificates

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037

--- Comment #4 from Dennis Wilson drwilso...@gmail.com ---
This patch adds the capability to trust an OCSP responder certificate.  This is
similar to the openssl -VAfile option.  This patch is a modification of the
original submitted patch from 2008 so that it works with Apache 2.4.4.  Prior
to this we used a third party module, but this allows Apache to accomplish the
same thing eliminating the need for the third party module.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

[Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037

Dennis Wilson drwilso...@gmail.com changed:

   What|Removed |Added

 CC||drwilso...@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

DO NOT REPLY [Bug 46037] Configuration of trusted OCSP responder certificates

[bugzilla]

https://issues.apache.org/bugzilla/show_bug.cgi?id=46037


Dr Stephen Henson [EMAIL PROTECTED] changed:

   What|Removed |Added

  Attachment #22754|Add |Add
description|OCSPResponderCertificateFile|SSLOCSPResponderCertificateF
   |option. |ile option.




-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]