[Bug 62031] document better ocsp stapling values

https://bz.apache.org/bugzilla/show_bug.cgi?id=62031

Rich Bowen <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Rich Bowen <[email protected]> ---
Added a "Tuning OCSP Stapling for production" subsection to the SSL
howto with recommended settings for:
- SSLStaplingReturnResponderErrors off
- SSLStaplingResponderTimeout 4
- SSLStaplingStandardCacheTimeout 172800 (48 hours)
- SSLStaplingErrorCacheTimeout 60

Patched in r1933726 (trunk), r1933727 (2.4).

If the current default values are genuinely causing widespread issues,
it may be worth opening a separate ticket proposing changes to the
defaults themselves — that would be a code change rather than a
documentation issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.