diff options
| author | René Korthaus <[email protected]> | 2017-08-07 22:09:34 +0200 |
|---|---|---|
| committer | René Korthaus <[email protected]> | 2017-08-07 22:11:54 +0200 |
| commit | dd7aa3778a36af3980103e281c89f1fb34fa1624 (patch) | |
| tree | 64aedb1c5618380cce6262449d7da44e2261442f /doc/manual/x509.rst | |
| parent | c12b1c012d8ec73c7b5c2e3f6ebbed7f572f902a (diff) | |
Add http_util to module policies (GH #1109)
http_util is required by the x509 module to perform
online OCSP checks, which should be defaulted to ON.
Without being part of the policy, it would be disabled.
Diffstat (limited to 'doc/manual/x509.rst')
| -rw-r--r-- | doc/manual/x509.rst | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/manual/x509.rst b/doc/manual/x509.rst index 58ad1d0ca..72a7b32b7 100644 --- a/doc/manual/x509.rst +++ b/doc/manual/x509.rst @@ -407,7 +407,9 @@ set of functions in ``x509path.h`` named ``x509_path_validate``: current system clock's current time. ``ocsp_timeout`` sets the timeout for OCSP requests. The default of 0 disables OCSP checks alltogether. ``ocsp_resp`` allows adding additional OCSP responses retrieved from outside - of the path validation. + of the path validation. Note that OCSP online checks are done only + as long as the http_util module was compiled in. Availability of online + OCSP checks can be checked using the macro BOTAN_HAS_ONLINE_REVOCATION_CHECKS. For the different flavours of ``x509_path_validate``, check ``x509path.h``. |