ocsp stapling
Jeremy Harris <[email protected]> Wed, 28 Aug 2019 17:56:00 +0100
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <[email protected]> |
The current docs at https://www.gnutls.org/manual/gnutls.html#OCSP-stapling list gnutls_ocsp_status_request_is_checked() as being usable server-side. However, the function description at https://www.gnutls.org/manual/gnutls.html#gnutls_005focsp_005fstatus_005frequest_005fis_005fchecked reads as if it is aimed at client-side support. The implementation calls gnutls_ocsp_status_request_get() for the _SR_IS_AVAIL case, which is documented as "response received from the TLS server" - ie. client-side only. What should be used for observability of stapling request and presented response status, server side? -- Cheers, Jeremy