Mailing List Archive

[Bug 61818] OCSP "SSLUseStapling on" completely blocking the server when something is off with the responder
https://bz.apache.org/bugzilla/show_bug.cgi?id=61818

--- Comment #3 from tomasz.konefal@ubc.ca ---
Created attachment 37055
--> https://bz.apache.org/bugzilla/attachment.cgi?id=37055&action=edit
Effect on workers & connections

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 61818] OCSP "SSLUseStapling on" completely blocking the server when something is off with the responder [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=61818

--- Comment #4 from tomasz.konefal@ubc.ca ---
One of our hosted sites has a certificate with crl.usertrust.com
(151.139.128.14) as a CRL Distribution point and ocsp.usertrust.com
(151.139.128.14) for OCSP in the Authority Information Access field.

We are able to reproduce symptoms like this when the above IP is blocked
outbound from the web server.

Please see the above attached image indicating what happens to the worker
threads and connection count when the block is enabled (~09h42) and later
disabled (~09h52).

Unfortunately, there are no meaningful logs to go along with this.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org