Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-5079

logging enhancements around OCSP

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: 7.1.0
    • Component/s: Logging
    • Labels:
      None

      Description

      There are some error cases in OCSP that are not logged as errors or don't any any context of what certificate is failing when there is an error.

      From OCSPStapling.cc:

        Debug("ssl_ocsp", "process_responder: fail to connect to OCSP respond server");
        Debug("ssl_ocsp", "stapling_refresh_response: fail to refresh response");
        Debug("ssl_ocsp", "Failed to refresh OCSP for 1 certificate");
        Debug("ssl_ocsp", "ssl_callback_ocsp_stapling: fail to get certificate information");
        Debug("ssl_ocsp", "ssl_callback_ocsp_stapling: fail to get certificate status");
      

        Attachments

          Activity

            People

            • Assignee:
              randall Randall Leeds
              Reporter:
              randall Randall Leeds
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: