Open sbordet opened 3 years ago
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.
Jetty version 10.0.x
Description OCSP (Online Certificate Status Protocol) is supported by the JDK, but only by setting JVM-wide properties.
As such it won't be possible to have 2 different TLS connectors configured differently, or a proxy with client and server configured differently.
The OCSP support in
SslContextFactory
should be reviewed and possibly deprecated, likely in favor of a Jetty module that enables OCSP at the server level.