Stefan Eissing
Stefan Eissing
Closing due to lack of feedback.
So, the scenario where this bites is a vhost change of `ServerName` and have the previous name in `ServerAlias`? And the move detection does not catch this. This would lead...
> The code in `md_reg_sync_start()` searches using the name "c" so it does not find the MD of the old configuration. Ah, ok. Well, I think I can live with...
No change planned on this.
@jmwebservices `MDStapling` is off by default. It does not hurt if you configure this, but it is not necessary.
If you disable `MDStapling` you "only" get the stapling implementation in `mod_ssl`. I think the one in `mod_md` is superior - but I may be biased. When LE swiches off...
> [@icing](https://github.com/icing) I was not aware that `mod_md` would skip the stapling checks when it receives a certificate without an OCSP url. However, wouldn't `mod_ssl` then perform stapling checks against...
> > So when LE turns off OCSP support, is the only required `mod_md` change is to set `MDMustStaple off`? > That is my expectation. Of course, we are talking...
This is on my todo list which I hope to get to this summer. I read that ARI had almost been accepted by the ACME group but there was some...
Implemented in the just released v2.6.0