Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-10-25 Thread Joe Orton
On Wed, Sep 16, 2009 at 01:45:30PM +0100, Joe Orton wrote: On Wed, Sep 16, 2009 at 01:38:50PM +0100, Dr Stephen Henson wrote: I may have missed something here but the OCSP stapling code doesn't appear to be in trunk. The patch in:

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-10-25 Thread Dr Stephen Henson
Joe Orton wrote: I finally got round to finishing this off, holidays and similar excuses now out of the way. First of all: thanks a lot for the patch, and sorry it took so long to merge! Many thanks. I'm away from my test setup for a couple of days so can't test it at present. I made

AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-22 Thread Natanael Mignon - michael-wessel . de
. :-/ Mit freundlichen Grüßen / Kind regards Natanael Mignon Von: Dr Stephen Henson [shen...@oss-institute.org] Gesendet: Freitag, 11. September 2009 11:45 An: dev@httpd.apache.org Betreff: Re: OCSP stapling in mod_ssl - use as OCSP cache for client

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread William A. Rowe, Jr.
Dr Stephen Henson wrote: First comment to list in general: any comments on what needs to be done to get the OCSP stapling patch accepted? I had been under the impression, from reading the bug commentary too many times, that it was not vetting the CA chain from root to cert. It seems I

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread Dr Stephen Henson
William A. Rowe, Jr. wrote: Dr Stephen Henson wrote: First comment to list in general: any comments on what needs to be done to get the OCSP stapling patch accepted? I had been under the impression, from reading the bug commentary too many times, that it was not vetting the CA chain from

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-16 Thread Joe Orton
On Wed, Sep 16, 2009 at 01:38:50PM +0100, Dr Stephen Henson wrote: I may have missed something here but the OCSP stapling code doesn't appear to be in trunk. The patch in: https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 doesn't apply cleanly any more, though the changes needed

OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Natanael Mignon - michael-wessel . de
Hello Steve, dear list, inspired by https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 (OCSP stapling support for mod_ssl) I dare asking, if this patch might solve a requirement we face at the moment: We do client authentication with certificates in Apache/mod_ssl (working as

Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Dr Stephen Henson
Natanael Mignon - michael-wessel.de wrote: Hello Steve, dear list, inspired by https://issues.apache.org/bugzilla/show_bug.cgi?id=43822 (OCSP stapling support for mod_ssl) I dare asking, if this patch might solve a requirement we face at the moment: We do client authentication with

AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread Natanael Mignon - michael-wessel . de
-Ursprüngliche Nachricht- Von: Dr Stephen Henson [mailto:shen...@oss-institute.org] Gesendet: Freitag, 11. September 2009 11:46 An: dev@httpd.apache.org Betreff: Re: OCSP stapling in mod_ssl - use as OCSP cache for client authentication Now to the actual query, if I understand

Re: AW: OCSP stapling in mod_ssl - use as OCSP cache for client authentication

2009-09-11 Thread William A. Rowe, Jr.
Natanael Mignon - michael-wessel.de wrote: -Ursprüngliche Nachricht- Von: Dr Stephen Henson [mailto:shen...@oss-institute.org] If that's correct then you could reuse some of the OCSP response query and caching code in the stapling patch. It implements similar functionality. [NM]