[Bug 66440] New: The maximum effective value of SSLSessionCacheTimeout is 3600

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=66440

            Bug ID: 66440
           Summary: The maximum effective value of SSLSessionCacheTimeout
                    is 3600
           Product: Apache httpd-2
           Version: 2.4.37
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: zhenying.gu@irs.gov
  Target Milestone: ---

When SSLSessionCacheTimeout is set to a value less than or equal to 3600, and
SSLVerifyClient is set to true, the log shows that the interval between
mod_ssl's verifying the client certificate is the value of
SSLSessionCacheTimeout.  When it is set to 5400 or lager, mod_ssl still
verifies the client certificate every 3600 seconds.  

In addition, SSLSessionCacheTimeout defined in virtual host doesn't overwrite
the value defined in ssl.conf.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 66440] The maximum effective value of SSLSessionCacheTimeout is 3600

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=66440

Aaron Ogburn <ao...@redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |aogburn@redhat.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org