sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-04 00:00:14 -04:00
Code Issues Projects Releases Wiki Activity
19,435 Commits 101 Branches 327 Tags
Commit Graph

3 Commits

Author SHA1 Message Date
Tobias Brunner
1968615590 revocation: Enforce a (configurable) timeout when fetching OCSP/CRL 
Malicious servers could otherwise block the fetching thread indefinitely
after the initial TCP handshake (which has a default timeout of 10s
in the curl and winhttp plugins, the soup plugin actually has a default
overall timeout of 10s).
 2022-10-03 10:48:46 +02:00
Tobias Brunner
2de9bb30fe revocation: More accurately describe the flags to disable OCSP/CRL validation 
These options disable validation as such, e.g. even from cached CRLs, not
only the fetching.  Also made the plugin's validate() implementation a
no-op if both options are disabled.
 2017-02-15 10:41:38 +01:00
Andreas Steffen
e3f63c6469 revocation: OCSP and/or CRL fetching can be disabled 2016-12-30 18:12:53 +01:00