We already did this for the AIA handler but neglected to do so for the ncp11 handler. Testing suggests that very short cache durations (e.g. the 2-minute status quo) can confuse NSS; the 1-hour duration used by the safetlsa default is likely to be less problematic.
We already did this for the AIA handler but neglected to do so for the ncp11 handler. Testing suggests that very short cache durations (e.g. the 2-minute status quo) can confuse NSS; the 1-hour duration used by the safetlsa default is likely to be less problematic.