Router: Support OCSP stapling
Open
@knobunc is already working on this.
Since Oct 25, 2016.
component/routing
kind/feature
lifecycle/frozen
priority/P2
- Dominant language
- Go
- Stars
- 8.7k
- Forks
- 4.8k
- Avg merge
- 4d 10h
- Merged PRs (30d)
- 53
Description
It would be great to support ocsp stapling in the haproxy router.
AFAICT it needs two things
- a loop that gets the ocsp response to serve,
- either a call to haproxy's unix socket with the response, or the file /var/lib/haproxy/router/certs/*.pem.ocsp.
The first part can be easily delegated to an external service that e.g. annotates the route. The second one is not possible now afaict. Getting the response should be easy enough though, there are go libraries available.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.