You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2015/06/19 05:38:00 UTC
[jira] [Commented] (TS-3384) Add stats for OCSP Stapling errors
[ https://issues.apache.org/jira/browse/TS-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14592959#comment-14592959 ]
ASF subversion and git services commented on TS-3384:
-----------------------------------------------------
Commit 2addb39577aa0f12abe430027e8cbff33fbcb3ef in trafficserver's branch refs/heads/master from [~ffcai]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=2addb39 ]
TS-3384: Add stats for OCSP Stapling errors
> Add stats for OCSP Stapling errors
> ----------------------------------
>
> Key: TS-3384
> URL: https://issues.apache.org/jira/browse/TS-3384
> Project: Traffic Server
> Issue Type: Improvement
> Components: SSL
> Reporter: Feifei Cai
> Assignee: Bryan Call
> Labels: review
> Fix For: 6.0.0
>
> Attachments: TS-3384.diff
>
>
> # Add stats for bad OCSP response status: revoked or unknown.
> {noformat}
> $ traffic_line -m proxy.process.ssl.ssl_ocsp
> proxy.process.ssl.ssl_ocsp_revoked_cert_stat 0
> proxy.process.ssl.ssl_ocsp_unknown_cert_stat 0
> {noformat}
> {noformat}
> OCSP_resp_find_status(bs, cinf->cid, &status, &reason, &rev, &thisupd, &nextupd);
> switch (status) {
> case V_OCSP_CERTSTATUS_GOOD:
> break;
> case V_OCSP_CERTSTATUS_REVOKED:
> SSL_INCREMENT_DYN_STAT(ssl_ocsp_revoked_cert_stat);
> break;
> case V_OCSP_CERTSTATUS_UNKNOWN:
> SSL_INCREMENT_DYN_STAT(ssl_ocsp_unknown_cert_stat);
> break;
> default:
> break;
> }
> {noformat}
> # change debug tag in OCSP Stapling to ssl_ocsp.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)