Yog tus neeg siv khoom tsis tau txais cov lus teb, nws tsuas yog hu rau OCSP server los ntawm nws tus kheej … Yog li ntawd, cov neeg siv khoom txuas ntxiv muaj kev lees paub los ntawm daim ntawv pov thawj txoj cai uas daim ntawv pov thawj tam sim no siv tau (lossis tsis ntev los no), tab sis tsis tas yuav hu rau tus kheej rau OCSP server.
Puas OCSP stapling xav tau?
OCSP yuav tsum-staple
Tus neeg tawm tsam nrog daim ntawv pov thawj tshem tawm tuaj yeem tsis quav ntsej muab OCSP lus teb thaum browser txuas rau nws thiab browser yuav lees txais lawv tshem tawm daim ntawv pov thawj. Nyob rau hauv OCSP mus nqa cov ntaub ntawv, ib tug soft-fail mus kom ze ua rau kev nkag siab.
Koj paub li cas yog tias koj OCSP tau stapled?
Kuaj seb OCSP stapling puas tau qhib.
Mus rau https://www.digicert.com/help thiab hauv lub thawv Chaw Nyob Chaw Nyob, ntaus hauv koj qhov chaw nyob server (piv txwv li www.digicert.com). Yog tias OCSP stapling tau qhib, nyob rau hauv SSL Daim Ntawv Pov Thawj tsis tau muab tshem tawm, mus rau sab xis ntawm OCSP Staple, nws hais tias Zoo.
Kuv yuav ua li cas thiaj li pab tau OCSP stapling?
Kho koj lub Apache server siv OCSP Stapling
- Kho koj lub xaib VirtualHost SSL kev teeb tsa. Ntxiv cov kab hauv qab no INSIDE lub thaiv: SSLUseStapling rau. …
- Tshawb xyuas qhov kev teeb tsa rau qhov yuam kev nrog Apache Control kev pabcuam. Apachectl -t.
- Reload lub Apache kev pabcuam. kev pabcuam apache2 reload.
OCSP stapling ua haujlwm li cas?
Yuav ua li cas OCSP stapling ua haujlwm. OCSP stapling yog ib txoj hauv kev zoo dua los tswj xyuas cov ntaub ntawv pov thawj. … Thaum tus neeg siv sim mus xyuas qhov chaw,cov lus teb digitally lub sij hawm-stamped yog ces "stapled" nrog TLS / SSL handshake ntawm daim ntawv pov thawj xwm txheej Thov ncua lus teb.
