tree 040886d686aa1eeb2d290c039b29e608f2c6633e
parent 924507bd9d8a3655e66ac3e619edd20cfbb18e01
author Roman Arutyunyan <arut@nginx.com> 1590157812 +0300
committer Roman Arutyunyan <arut@nginx.com> 1590157812 +0300

SSL: client certificate validation with OCSP (ticket #1534).

OCSP validation for client certificates is enabled by the "ssl_ocsp" directive.
OCSP responder can be optionally specified by "ssl_ocsp_responder".

When session is reused, peer chain is not available for validation.
If the verified chain contains certificates from the peer chain not available
at the server, validation will fail.