]> git.kaiwu.me - nginx.git/commit
OCSP stapling: ssl_stapling_file support.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 1 Oct 2012 12:41:08 +0000 (12:41 +0000)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 1 Oct 2012 12:41:08 +0000 (12:41 +0000)
commit85c920a0cd4983679fe51ad492abf5dea8ccc497
treea8dea075ef1040da844ef777e184f9e22176d997
parent3648ba7db833d318269daba2a8d6be42660c5b60
OCSP stapling: ssl_stapling_file support.

Very basic version without any OCSP responder query code, assuming valid
DER-encoded OCSP response is present in a ssl_stapling_file configured.

Such file might be produced with openssl like this:

openssl ocsp -issuer root.crt -cert domain.crt -respout domain.staple \
             -url http://ocsp.example.com
auto/sources
src/event/ngx_event_openssl.h
src/http/modules/ngx_http_ssl_module.c
src/http/modules/ngx_http_ssl_module.h