From: Kaspar Brand Date: Thu, 1 Aug 2013 06:58:08 +0000 (+0000) Subject: RFC 6961 (TLS Multiple Certificate Status Extension) X-Git-Tag: 2.4.7~332 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=42a8d322eed2665de59780433f1457d2fd971cfa;p=apache RFC 6961 (TLS Multiple Certificate Status Extension) has been published in June 2013; replace obsolete I-D reference. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1509098 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en index 7033a6e3eb..ca7b461713 100644 --- a/docs/manual/mod/mod_ssl.html.en +++ b/docs/manual/mod/mod_ssl.html.en @@ -2424,13 +2424,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).

diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 19bd4a5cc0..856a41c12a 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -2281,14 +2281,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).