Re: Solving mutex concerns with OCSP stapling

2015-05-12 Thread Jeff Trawick
On 05/06/2015 08:19 PM, Jeff Trawick wrote: On 05/03/2015 09:58 PM, Jeff Trawick wrote: Your thoughts on the following? Current OCSP behavior that I think needs to be fixed: mod_ssl holds the single stapling global mutex when looking up a cached entry, deserializing it, checking validity,

Re: Solving mutex concerns with OCSP stapling

2015-05-06 Thread Jeff Trawick
On 05/03/2015 09:58 PM, Jeff Trawick wrote: Your thoughts on the following? Current OCSP behavior that I think needs to be fixed: mod_ssl holds the single stapling global mutex when looking up a cached entry, deserializing it, checking validity, and (when missing/expired) communicating with

Solving mutex concerns with OCSP stapling

2015-05-03 Thread Jeff Trawick
Your thoughts on the following? Current OCSP behavior that I think needs to be fixed: mod_ssl holds the single stapling global mutex when looking up a cached entry, deserializing it, checking validity, and (when missing/expired) communicating with the OCSP responder to get a new response. 1.