Re: [users@httpd] Correctly configuring OCSP Stapling cache

2018-01-18 Thread Johannes Bauer
Hi Stefan, On 18.01.2018 10:00, Stefan Eissing wrote: > Yes, this is definitely an area where the server can and should be > improved. Marat already provided the link to the article discussing > this last year and the situation is unchanged, unfortunately. Not for > lack of recognition of the

Re: [users@httpd] Correctly configuring OCSP Stapling cache

2018-01-18 Thread Johannes Bauer
Hi Marat, On 18.01.2018 08:37, Marat Khalili wrote: > Did you read > https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html > ? Judging by https://bz.apache.org/bugzilla/show_bug.cgi?id=57121 it is > still unfixed, I

[users@httpd] Correctly configuring OCSP Stapling cache

2018-01-17 Thread Johannes Bauer
Hi Apache users, I've configured OCSP stapling and use certificates that use the OCSP-must-staple X.509 extension. I *must* use stapling. My CA LetsEncrypt has fairly long OCSP ticket lifetimes (7 days), but their OCSP responder can be flaky at times. This means that I've now had outages a

[users@httpd] Problem with mod_rewrite

2014-01-31 Thread Johannes Bauer
Hi list, I'm currently having some trouble with Apache 2.2.25 running in conjunction with PHP 5.4.4. It's running a blog software (b2evolution). Please don't judge me, it's not my blog :-) Anyways, permalinks to the blog previously looked like this: