Hi,
Does apache httpd implement RFC 6961?
In the docs
" OCSP stapling relieves the client of querying the OCSP responder on its
own, but it should be noted that with the RFC 6066 specification, the
server's CertificateStatus reply may only include an OCSP response for a
single cert. For server certificates with intermediate CA certificates in
their chain (the typical case nowadays), stapling in its current
implementation therefore only partially achieves the stated goal of "saving
roundtrips and resources" - see also RFC 6961
<http://www.ietf.org/rfc/rfc6961.txt> (TLS Multiple Certificate Status
Extension)."
From the wording, its not clear
Thanks
Akshath
Does apache httpd implement RFC 6961?
In the docs
" OCSP stapling relieves the client of querying the OCSP responder on its
own, but it should be noted that with the RFC 6066 specification, the
server's CertificateStatus reply may only include an OCSP response for a
single cert. For server certificates with intermediate CA certificates in
their chain (the typical case nowadays), stapling in its current
implementation therefore only partially achieves the stated goal of "saving
roundtrips and resources" - see also RFC 6961
<http://www.ietf.org/rfc/rfc6961.txt> (TLS Multiple Certificate Status
Extension)."
From the wording, its not clear
Thanks
Akshath