bjacke

try checking cert revocation status unconditionally

2

it happens from time to time, that CAs revoke certificates, like recently Letsencrypt: https://www.bleepingcomputer.com/news/security/lets-encrypt-is-revoking-lots-of-ssl-certificates-in-two-days/ Many people will not notice if their certificate got revoked. Dehydrated also doesn't notice that currently....

allow ocsp fetching via proxy

1

openssl ocsp does not honor http_proxy environment variable and there is no option to specify a proxy. There is an easy way to use a http proxy though. A typical...

ocsp fetch delay required after new cert was issued

2

If you issue a new cert, then the ocsp information for that certificate is sometimes not yet available at the ocsp servers. In such situations a must-staple certificat will be...

This requirest is related to issue #785 but it's not the same. If OCSP_MUST_STAPLE is enabled and if the initial ocsp fetch (after a a fresh new cert was issued)...

configured forward zone occasionally not resolved through defined forward-addr server

29

I have a forwarding zone defined like this: domain-insecure: "private" forward-zone: name: "example.private" forward-addr: 10.0.0.10 forward-addr: 10.0.0.20 this is working well most of the time but sometimes DNS queries from...

metadata of HLS streams is ignored

1

the metadata of HLS (m3u8) sreams is ignored but it should be displayed just like for plain http streams. Example: https://mp3.querfunk.de/qfhi (plain http stream metadata shown) https://mp3.querfunk.de/qfhi/hls.m3u8 (HLS stream, no...

static IP support

1

you seem to only support DHCP addresses. There's a guy who extended the mptcp_up script for static addresses also: https://github.com/onemarcfifty/mptcp_stuff

along with issue 9 it would be great if also IPv6 support would be supported by the mptcp_up/down scripts.

If fileAddDate = yes is set and if we send darkice the USR1 signal, it should write the data into the file with the up-to-date date, not override the initial...