From 42a8d322eed2665de59780433f1457d2fd971cfa Mon Sep 17 00:00:00 2001 From: Kaspar Brand Date: Thu, 1 Aug 2013 06:58:08 +0000 Subject: [PATCH] RFC 6961 (TLS Multiple Certificate Status Extension) has been published in June 2013; replace obsolete I-D reference. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1509098 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_ssl.html.en | 9 +++++---- docs/manual/mod/mod_ssl.xml | 10 +++++----- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en index 7033a6e3eb..ca7b461713 100644 --- a/docs/manual/mod/mod_ssl.html.en +++ b/docs/manual/mod/mod_ssl.html.en @@ -2424,13 +2424,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).

diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 19bd4a5cc0..856a41c12a 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -2281,14 +2281,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).

-- 2.50.1