indutny / indutny/ocsp

ocsp stapling question

Open
#3 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
86
Forks
46
PR merge metrics
No merged PRs in 30d

Description

Hi,
I use your ocsp cache.js, how long will the ocsp status I get from OCSP server be cached?
Imaging it will be cached for one day(24h), during this period, if some client(broswer) come to connect my server, my server don't need to connect OCSP server to get ocsp status again. But, I use wireshark and find that my server still go to connect OCSP server. Is it correct?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading ocsp cache.js and tracing how OCSP responses are stored and reused. Compare that behavior with the reported Wireshark requests; done means explaining the cache lifetime and why the server contacts the OCSP responder again.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.