[PATCH] SSL: ssl_stapling_valid directive

[Maxim Dounin]

Hello!

On Mon, Jan 13, 2014 at 06:08:53PM +0400, kyprizel wrote:

> "some cases", for example = you have a lot of users with wrong system time,
> so they can't access the server if OCSP responses updated too frequently.

This looks like a very-very wrong way to address the problem.  
Instead of resolving the problem it will hide it on some requests 
(but not on others), making the problem harder to detect and debug.

-- 
Maxim Dounin
http://nginx.org/