Mercurial > hg > nginx-quic
comparison auto/cc/owc @ 4879:4a804fd04e6c
OCSP stapling: ssl_stapling_verify directive.
OCSP response verification is now switched off by default to simplify
configuration, and the ssl_stapling_verify allows to switch it on.
Note that for stapling OCSP response verification isn't something required
as it will be done by a client anyway. But doing verification on a server
allows to mitigate some attack vectors, most notably stop an attacker from
presenting some specially crafted data to all site clients.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Mon, 01 Oct 2012 12:53:11 +0000 |
parents | d620f497c50f |
children | 670ceaba03d8 |
comparison
equal
deleted
inserted
replaced
4878:695cc88ad649 | 4879:4a804fd04e6c |
---|