search

erlef / security-wg

Repo for the Security Working Group
https://erlef.github.io/security-wg/
195 stars 18 forks source link

OCSP Implementation #3

Open max-au opened 5 years ago

max-au commented 2 years ago

It is actually here. See @voltone blog post: https://blog.voltone.net/post/21

voltone commented 2 years ago

No, that was just a local patch that enabled OCSP stapling in the TLS handshake, given an OCSP response generated by some other client (e.g. OpenSSL cli). The OTP team insisted an OCSP implementation start with a native client inside OTP.

An 'experimental' implementation was included in SSL 10.1 (OTP 23.1), but I looked at it at the time and I can only say that it should not be used. I'm not sure how much work was done since the (the author of that implementation left the OTP team).

maennchen commented 5 months ago

Latest OTP issue: https://github.com/erlang/otp/issues/8242