Versions Compared

Old Version 8

changes.mady.by.user Wei Sun

Saved on

compared with

New Version 9

changes.mady.by.user Wei Sun

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Current 'mode' for verifying peer certificate is a global option, it's good to have specific mode among different sites hosted on a same machine. This mode will be preferred if it is not NULLIf the mode is non-empty, it would be the preference when making the decision to verify peer or not. Otherwise, the global mode will take effect.

...

4. Expose API to extract peer certificate data

  • Application use ATS to verify peer certificate, and expect some When verifying peer certificates, A few customers expect to obtain the specific cert data (i.e. subject, issuer info) can be forwarded to orgin servers as welland forward them to origin servers. It's better to expose API to extract peer certificate data.
  • Status: https://issues.apache.org/jira/browse/TS-2210

5. SSL_read size threshold

  • A few customers in Yahoo expect a size threshold for client request over ssl from protecting their system perspective. If the max reqested requested data exceed the threshold, server will reject the client connection.