Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[release/8.0] Fix server-side OCSP stapling on Linux #96838

Merged
merged 3 commits into from
Jan 16, 2024
Merged

[release/8.0] Fix server-side OCSP stapling on Linux #96838

merged 3 commits into from
Jan 16, 2024

Commits on Jan 11, 2024

  1. Add entire issuer chain to trusted X509_STORE when stapling OCSP_Resp… 

    …onse (dotnet#96792)

* Add entire issuer chain to trusted X509_STORE when validating OCSP_Response

* Code review feedback

* More code review feedback

* Update src/libraries/System.Net.Security/src/System/Net/Security/SslStreamCertificateContext.Linux.cs

Co-authored-by: Jeremy Barton <jbarton@microsoft.com>

* Fix compilation

* Always include root certificate

---------

Co-authored-by: Jeremy Barton <jbarton@microsoft.com>
    @rzikm @bartonjs
    rzikm and bartonjs committed Jan 11, 2024
    Configuration menu
    Copy the full SHA
    df4171f View commit details
    Browse the repository at this point in the history

  2. Recover from failed OCSP download. (dotnet#96448) 

    * Recover from failed OCSP check.

* Add 5s back-off after failed OCSP querry
    @rzikm
    rzikm committed Jan 11, 2024
    Configuration menu
    Copy the full SHA
    174b8c0 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. Don't shorten OCSP expriation on failed server OCSP fetch (dotnet#96972) 

    * Don't shorten OCSP expriation on failed server OCSP fetch

* Code review feedback
    @rzikm @wfurt
    rzikm authored and wfurt committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    cabb320 View commit details
    Browse the repository at this point in the history