| commit | 4f3c87a5d942d4d0649c35805ff4e335970b87d4 | [log] [tgz] |
|---|---|---|
| author | Emeric Brun <ebrun@haproxy.com> | Fri Jun 20 15:46:13 2014 +0200 |
| committer | Willy Tarreau <w@1wt.eu> | Mon Jun 23 12:14:47 2014 +0200 |
| tree | d07daabd75e39db46deb7dc46aff052e4baf906a | |
| parent | 13a6b48e241c0a50b501446992ab4fda2529f317 [diff] |
BUG/MEDIUM: ssl: Fix to not serve expired OCSP responses. For some browsers (firefox), an expired OCSP Response causes unwanted behavior. Haproxy stops serving OCSP response if nextupdate date minus the supported time skew (#define OCSP_MAX_RESPONSE_TIME_SKEW) is in the past.