httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marc Stern" <>
Subject Re: OCSP support added
Date Fri, 24 Sep 2004 07:19:18 GMT
Just a little correction: the code is being tested (under Windows and Linux)
from January 2004, not May.


----- Original Message ----- 
From: "Marc Stern" <>
To: <>
Sent: Thursday, September 23, 2004 1:41 PM
Subject: OCSP support added

> I added support for certificate validation through OCSP, where the OCSP
> server URI is contained in the certificate itself (following the X.509
> standard).
> The patch is available on
> (for 2.0.49, but
> most of it is in separate files).
> The check is optional.
> There is also a parameter to decide if the authentication fails or not
> the server cannot be reached.
> The code allows conditional compilation (full code enclosed in #ifdef).
> This was developed for the Belgium Government and distributed publicly
> may 2004. No bug has been reported since.
> The code supports a proxy, although the option was not added in the config
> file.
> Another option in the config file could be to use a specified URI in case
> is not present in the certificate.
> If you have any remarks about it, just send me an e-mail.
> If you want this to be included in new releases, you can vote for it on
> Marc

View raw message