Checkout
Ruediger Pluem
committed
on 18 Mar
* modules/ssl/ssl_util_stapling.c (stapling_check_response) Don't stop
Certificate Revoked messages.

Certificate Revoked Responder mess… Show more
* modules/ssl/ssl_util_stapling.c (stapling_check_response) Don't stop

 Certificate Revoked messages.

 Certificate Revoked Responder messages don't belong to 'error' class.

 When the server receives one, it MUST be passed on to the client.

 And stored for the normal period of basic responses.

 Also don't log an error each time it is retrieved from cache,

 only once when it is retrieved from the OCSP responder.

PR: 60182

Obtained from: https://github.com/apache/httpd/commit/7db9795f45fd4688ceb13ee36090e4e2becbc709.diff

Submitted by: <gmoniker@gmail.com>

Reviewed by: rpluem

Show less