[PATCH] SSL: ssl_stapling_valid directive

Maxim Dounin mdounin at mdounin.ru
Mon Jan 13 14:51:23 UTC 2014


On Mon, Jan 13, 2014 at 06:08:53PM +0400, kyprizel wrote:

> "some cases", for example = you have a lot of users with wrong system time,
> so they can't access the server if OCSP responses updated too frequently.

This looks like a very-very wrong way to address the problem.  
Instead of resolving the problem it will hide it on some requests 
(but not on others), making the problem harder to detect and debug.

Maxim Dounin

More information about the nginx-devel mailing list