MINOR: ssl: rename tune.ssl.ocsp-update.mode in ocsp-update.mode
Since the ocsp-update is not strictly a tuning of the SSL stack, but a feature of its own, lets rename the option. The option was also missing from the index.
This commit is contained in:
parent
ea3b89952d
commit
ee58fac1b4
@ -1291,6 +1291,7 @@ The following keywords are supported in the "global" section :
|
|||||||
- node
|
- node
|
||||||
- numa-cpu-mapping
|
- numa-cpu-mapping
|
||||||
- ocsp-update.httpproxy
|
- ocsp-update.httpproxy
|
||||||
|
- ocsp-update.mode
|
||||||
- pidfile
|
- pidfile
|
||||||
- pp2-never-send-local
|
- pp2-never-send-local
|
||||||
- presetenv
|
- presetenv
|
||||||
@ -2170,11 +2171,19 @@ numa-cpu-mapping
|
|||||||
already specified, for example via the 'cpu-map' directive or the taskset
|
already specified, for example via the 'cpu-map' directive or the taskset
|
||||||
utility.
|
utility.
|
||||||
|
|
||||||
|
|
||||||
ocsp-update.httpproxy <address>[:port]
|
ocsp-update.httpproxy <address>[:port]
|
||||||
Allow to use an HTTP proxy for the OCSP updates. This only works with HTTP,
|
Allow to use an HTTP proxy for the OCSP updates. This only works with HTTP,
|
||||||
HTTPS is not supported. This option will allow the OCSP updater to send
|
HTTPS is not supported. This option will allow the OCSP updater to send
|
||||||
absolute URI in the request to the proxy.
|
absolute URI in the request to the proxy.
|
||||||
|
|
||||||
|
ocsp-update.mode [ on | off ]
|
||||||
|
Sets the default ocsp-update mode for all certificates used in the
|
||||||
|
configuration. This global option can be superseded by the crt-list
|
||||||
|
"ocsp-update" option. This option is set to "off" by default.
|
||||||
|
See option "ocsp-update" for more information about the auto update
|
||||||
|
mechanism.
|
||||||
|
|
||||||
pidfile <pidfile>
|
pidfile <pidfile>
|
||||||
Writes PIDs of all daemons into file <pidfile> when daemon mode or writes PID
|
Writes PIDs of all daemons into file <pidfile> when daemon mode or writes PID
|
||||||
of master process into file <pidfile> when master-worker mode. This option is
|
of master process into file <pidfile> when master-worker mode. This option is
|
||||||
@ -4025,15 +4034,6 @@ tune.ssl.ocsp-update.mindelay <number>
|
|||||||
"tune.ssl.ocsp-update.maxdelay". See option "ocsp-update" for more
|
"tune.ssl.ocsp-update.maxdelay". See option "ocsp-update" for more
|
||||||
information about the auto update mechanism.
|
information about the auto update mechanism.
|
||||||
|
|
||||||
tune.ssl.ocsp-update.mode [ on | off ]
|
|
||||||
Sets the default ocsp-update mode for all certificates used in the
|
|
||||||
configuration. This global option can be superseded by the crt-list
|
|
||||||
"ocsp-update" option but an error will be raised if a given certificate has
|
|
||||||
two distinct configurations simultaneously. This option is set to "off" by
|
|
||||||
default.
|
|
||||||
See option "ocsp-update" for more information about the auto update
|
|
||||||
mechanism.
|
|
||||||
|
|
||||||
tune.stick-counters <number>
|
tune.stick-counters <number>
|
||||||
Sets the number of stick-counters that may be tracked at the same time by a
|
Sets the number of stick-counters that may be tracked at the same time by a
|
||||||
connection or a request via "track-sc*" actions in "tcp-request" or
|
connection or a request via "track-sc*" actions in "tcp-request" or
|
||||||
|
@ -2024,7 +2024,7 @@ static struct cfg_kw_list cfg_kws = {ILH, {
|
|||||||
#ifndef OPENSSL_NO_OCSP
|
#ifndef OPENSSL_NO_OCSP
|
||||||
{ CFG_GLOBAL, "tune.ssl.ocsp-update.maxdelay", ssl_parse_global_ocsp_maxdelay },
|
{ CFG_GLOBAL, "tune.ssl.ocsp-update.maxdelay", ssl_parse_global_ocsp_maxdelay },
|
||||||
{ CFG_GLOBAL, "tune.ssl.ocsp-update.mindelay", ssl_parse_global_ocsp_mindelay },
|
{ CFG_GLOBAL, "tune.ssl.ocsp-update.mindelay", ssl_parse_global_ocsp_mindelay },
|
||||||
{ CFG_GLOBAL, "tune.ssl.ocsp-update.mode", ssl_parse_global_ocsp_update_mode },
|
{ CFG_GLOBAL, "ocsp-update.mode", ssl_parse_global_ocsp_update_mode },
|
||||||
{ CFG_GLOBAL, "ocsp-update.httpproxy", ocsp_update_parse_global_http_proxy },
|
{ CFG_GLOBAL, "ocsp-update.httpproxy", ocsp_update_parse_global_http_proxy },
|
||||||
#endif
|
#endif
|
||||||
{ 0, NULL, NULL },
|
{ 0, NULL, NULL },
|
||||||
|
Loading…
x
Reference in New Issue
Block a user