nghttp2

Commit Graph

Author	SHA1	Message	Date
Tatsuhiro Tsujikawa	1428a5e3ae	nghttpx: Verify OCSP response At least we should make sure that the OCSP response is targeted to the expected certificate. This is important because we pass the file path to the external script, and if the file is replaced because of renewal, and nghttpx has not reloaded its configuration, the certificate nghttpx has loaded and the one included in the file differ. Verifying the OCSP response detects this, and avoids to send wrong OCSP response.	2017-05-25 23:14:57 +09:00
Tatsuhiro Tsujikawa	058122b804	nghttpx: Rename shrpx_ssl.{h,cc} as shrpx_tls.{h,cc} The namespace shrpx::ssl was also renamed as shrpx::tls.	2017-04-01 15:12:28 +09:00

Author

SHA1

Message

Date

Tatsuhiro Tsujikawa

1428a5e3ae

nghttpx: Verify OCSP response

At least we should make sure that the OCSP response is targeted to the
expected certificate.  This is important because we pass the file path
to the external script, and if the file is replaced because of
renewal, and nghttpx has not reloaded its configuration, the
certificate nghttpx has loaded and the one included in the file
differ.  Verifying the OCSP response detects this, and avoids to send
wrong OCSP response.

2017-05-25 23:14:57 +09:00

Tatsuhiro Tsujikawa

058122b804

nghttpx: Rename shrpx_ssl.{h,cc} as shrpx_tls.{h,cc}

The namespace shrpx::ssl was also renamed as shrpx::tls.

2017-04-01 15:12:28 +09:00

2 Commits