William Lallemand 2bcf38c7c8 MEDIUM: ssl: add ocsp-update.disable global option ...

This option allow to disable completely the ocsp-update.

To achieve this, the ocsp-update.mode global keyword don't rely anymore
on SSL_SOCK_OCSP_UPDATE_OFF during parsing to call
ssl_create_ocsp_update_task().

Instead, we will inherit the SSL_SOCK_OCSP_UPDATE_* value from
ocsp-update.mode for each certificate which does not specify its own
mode.

To disable completely the ocsp without editing all crt entries,
ocsp-update.disable is used instead of "ocsp-update.mode" which is now
only used as the default value for crt.

2024-05-17 17:35:51 +02:00

..

haproxy

MEDIUM: ssl: add ocsp-update.disable global option

2024-05-17 17:35:51 +02:00

import

MINOR: ist: define iststrip() new function

2024-04-26 11:29:25 +02:00

make

BUILD: makefile: support USE_xxx=0 as well

2024-04-11 11:06:19 +02:00