search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
358 stars 59 forks source link

lighttpd 1.4.56 #122

Closed gstrauss closed 3 years ago

gstrauss commented 3 years ago

lighttpd 1.4.56

This depends on #120

Submitting for review.

lighttpd-1.4.56~rc2 is available now, but lighttpd-1.4.56 has not yet been released.

gstrauss commented 3 years ago

lighttpd 1.4.57 has been released. Updated PR to update lighttpd version.

gstrauss commented 3 years ago

lighttpd 1.4.58 has been released. Updated PR to update lighttpd version.

gstrauss commented 3 years ago

lighttpd 1.4.59 has been released. Updated PR to update lighttpd version.

gstrauss commented 3 years ago

I rebased the PR on master and, per your feedback, added commits to adjust condition indenting and update a label.

The only outstanding discussion is ssl.stapling-file. Please review the one-paragraph doc for lighttpd TLS OCSP stapling. lighttpd asks the admin to handle of OCSP stapling externally to lighttpd. This differs from some other web servers, e.g. nginx, but does not suffer the initial failure of nginx to provide stapling on the the first request after nginx is started.

gstrauss commented 3 years ago

I modified the template to uncomment ssl.stapling-file, but only show it if form.ocsp is enabled (the default)

gstrauss commented 3 years ago

@gene1wood: Thank you for your suggestions and feedback.