From 7fd8cfb4c2b56d57746a35e4ca81422ebe1cd293 Mon Sep 17 00:00:00 2001 From: Kaspar Brand Date: Thu, 1 Aug 2013 06:58:08 +0000 Subject: [PATCH] RFC 6961 (TLS Multiple Certificate Status Extension) has been published in June 2013; replace obsolete I-D reference. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1509098 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_ssl.html.en | 8 ++++---- docs/manual/mod/mod_ssl.xml | 10 +++++----- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en index 7991455fd8..96ed2e1433 100644 --- a/docs/manual/mod/mod_ssl.html.en +++ b/docs/manual/mod/mod_ssl.html.en @@ -2420,13 +2420,13 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961.

diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 4032bdb8e0..87a23e1eee 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -2278,14 +2278,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).

-- 2.49.0