jetty / jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/2, HTTP/1.1, HTTP/1.0, websocket, servlets, and more
https://eclipse.dev/jetty
Other
3.84k stars 1.91k forks source link

Review OCSP support #6054

Open sbordet opened 3 years ago

sbordet commented 3 years ago

Jetty version 10.0.x

Description OCSP (Online Certificate Status Protocol) is supported by the JDK, but only by setting JVM-wide properties.

As such it won't be possible to have 2 different TLS connectors configured differently, or a proxy with client and server configured differently.

The OCSP support in SslContextFactory should be reviewed and possibly deprecated, likely in favor of a Jetty module that enables OCSP at the server level.

github-actions[bot] commented 2 years ago

This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] commented 1 year ago

This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] commented 6 months ago

This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.