Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-10-25 Thread Dr Stephen Henson
Joe Orton wrote: > > I finally got round to finishing this off, holidays and similar excuses > now out of the way. First of all: thanks a lot for the patch, and sorry > it took so long to merge! > Many thanks. I'm away from my test setup for a couple of days so can't test it at present. > I

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-10-25 Thread Joe Orton
On Wed, Sep 16, 2009 at 01:45:30PM +0100, Joe Orton wrote: > On Wed, Sep 16, 2009 at 01:38:50PM +0100, Dr Stephen Henson wrote: > > I may have missed something here but the OCSP stapling code doesn't appear > > to be > > in trunk. The patch in: > > > > https://issues.apache.org/bugzilla/show_bug.

AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-22 Thread Natanael Mignon - michael-wessel . de
afterwards. :-/ Mit freundlichen Grüßen / Kind regards Natanael Mignon Von: Dr Stephen Henson [shen...@oss-institute.org] Gesendet: Freitag, 11. September 2009 11:45 An: dev@httpd.apache.org Betreff: Re: OCSP stapling in mod_ssl - use as OCSP cache

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread Joe Orton
On Wed, Sep 16, 2009 at 01:38:50PM +0100, Dr Stephen Henson wrote: > I may have missed something here but the OCSP stapling code doesn't appear to > be > in trunk. The patch in: > > https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 > > doesn't apply cleanly any more, though the changes ne

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread Dr Stephen Henson
William A. Rowe, Jr. wrote: > Dr Stephen Henson wrote: >> First comment to list in general: any comments on what needs to be done to >> get >> the OCSP stapling patch accepted? > > I had been under the impression, from reading the bug commentary too many > times, that it was not vetting the CA ch

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread William A. Rowe, Jr.
Dr Stephen Henson wrote: > > First comment to list in general: any comments on what needs to be done to get > the OCSP stapling patch accepted? I had been under the impression, from reading the bug commentary too many times, that it was not vetting the CA chain from root to cert. It seems I misu

Re: AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread William A. Rowe, Jr.
Natanael Mignon - michael-wessel.de wrote: >> -Ursprüngliche Nachricht- >> Von: Dr Stephen Henson [mailto:shen...@oss-institute.org] >> >> If that's correct then you could reuse some of the OCSP response query >> and >> caching code in the stapling patch. It implements similar >> functional

AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Natanael Mignon - michael-wessel . de
> -Ursprüngliche Nachricht- > Von: Dr Stephen Henson [mailto:shen...@oss-institute.org] > Gesendet: Freitag, 11. September 2009 11:46 > An: dev@httpd.apache.org > Betreff: Re: OCSP stapling in mod_ssl - use as OCSP cache for client > authentication > > Now t

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Dr Stephen Henson
Natanael Mignon - michael-wessel.de wrote: > Hello Steve, dear list, > > inspired by https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 (OCSP > stapling support for mod_ssl) I dare asking, if this patch might solve a > requirement we face at the moment: > > We do client authentication with

OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Natanael Mignon - michael-wessel . de
Hello Steve, dear list, inspired by https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 (OCSP stapling support for mod_ssl) I dare asking, if this patch might solve a requirement we face at the moment: We do client authentication with certificates in Apache/mod_ssl (working as SSL-reverse