Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OCSP stapling #831

Open
krizhanovsky opened this issue Aug 31, 2017 · 0 comments
Open

OCSP stapling #831

krizhanovsky opened this issue Aug 31, 2017 · 0 comments
Labels
enhancement TLS Tempesta TLS module and related issues
Milestone
backlog

Comments

@krizhanovsky
Copy link
Contributor

krizhanovsky commented Aug 31, 2017 •
edited

OCSP stapling (see also https://wiki.mozilla.org/Security/Server_Side_TLS#OCSP_Stapling) must be implemented. Refer to RFC 6066, section 8. Certificate Status Request and RFC 6990 for OCSP definition.

Note that current mbedTLS still don't support OCSP Stapling (Mbed-TLS/mbedtls#880).

A lightweight C++ user-space daemon should periodically query a CA for OCSP staples and load them to Tempesta FW through netlink interface.

It seems also processing of status_request TLS extension in CLIENT HELLO message must be added to TLS handshake state machine.
@krizhanovsky krizhanovsky added this to the 1.0 WebOS milestone Aug 31, 2017
@krizhanovsky krizhanovsky modified the milestones: backlog, 0.8 TDB v0.2 May 26, 2018
@krizhanovsky krizhanovsky changed the title OCSP stapling TLS: OCSP stapling May 27, 2018
@krizhanovsky krizhanovsky modified the milestones: 1.2 TDB v0.2, 1.1 QUIC Aug 8, 2018
@krizhanovsky krizhanovsky added the TLS Tempesta TLS module and related issues label Aug 13, 2020
@krizhanovsky krizhanovsky changed the title TLS: OCSP stapling OCSP stapling Aug 13, 2020
@krizhanovsky krizhanovsky mentioned this issue Aug 13, 2020
Open
@krizhanovsky krizhanovsky mentioned this issue Aug 13, 2020
Open
@krizhanovsky krizhanovsky modified the milestones: 0.9 - TDB, 1.2 TBD Jan 3, 2022
@krizhanovsky krizhanovsky modified the milestones: 1.xx TBD, backlog Apr 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement TLS Tempesta TLS module and related issues
Projects
None yet
Milestone
backlog
Development

No branches or pull requests
1 participant
@krizhanovsky