search

lunarmodules / luasec

LuaSec
Other
363 stars 134 forks source link

OCSP Stapling #43

Open Nothing4You opened 9 years ago

Nothing4You commented 9 years ago

Please implement OCSP Stapling. This is especially useful to 1. reduce load of OCSP servers and 2. prevent privacy leaks of who is connecting to your host towards the OCSP server.

biergaizi commented 7 years ago

+1.

robert-scheck commented 6 years ago

Any chance?

brunoos commented 6 years ago

I don't know how hard is to implement this. I'm focused on university stuffs, I need to find free time for it.

mimi89999 commented 3 years ago

Hello, Are there any news on this?

brunoos commented 3 years ago

Sorry, I confess I did not look anything about it. I will try to find time to see it.

Zash commented 3 years ago

I started some exploratory coding in https://github.com/Zash/luasec/tree/ocsp that I believe manages a partial client-side OCSP check. No idea how to do the server-side parts yet, or how to check the cert for the must-staple flag.