mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-04 00:00:14 -04:00
1968615590
Malicious servers could otherwise block the fetching thread indefinitely after the initial TCP handshake (which has a default timeout of 10s in the curl and winhttp plugins, the soup plugin actually has a default overall timeout of 10s).
9 lines
254 B
Plaintext
9 lines
254 B
Plaintext
charon.plugins.revocation.enable_ocsp = yes
|
|
Whether OCSP validation should be enabled.
|
|
|
|
charon.plugins.revocation.enable_crl = yes
|
|
Whether CRL validation should be enabled.
|
|
|
|
charon.plugins.revocation.timeout = 10s
|
|
Timeout used when fetching OCSP/CRL.
|