59049 – Apache doesn't recover from OCSP decode error

Bug 59049 - Apache doesn't recover from OCSP decode error

Summary: Apache doesn't recover from OCSP decode error

Status:	NEW

Alias:	None

Product:	Apache httpd-2
Classification:	Unclassified
Component:	mod_ssl (show other bugs)
Version:	2.4.16
Hardware:	PC All

Importance:	P2 major (vote)
Target Milestone:	---
Assignee:	Apache HTTPD Bugs Mailing List

URL:
Keywords:

Duplicates (1):	61013 (view as bug list)
Depends on:
Blocks:

Reported:	2016-02-23 06:44 UTC by Pavel Cibulka
Modified:	2017-09-22 16:43 UTC (History)
CC List:	2 users (show)

Attachments
Error log (2.83 KB, text/plain) 2016-02-23 06:44 UTC, Pavel Cibulka	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Pavel Cibulka 2016-02-23 06:44:45 UTC

Created attachment 33582 [details]
Error log

When Apache get OCSP decode error, it doesn't recover from it and returns "ERR_CONNECTION_CLOSED" since that. "SSLStaplingReturnResponderErrors off" doesn't help.

I'm attaching error log. Apache returned ERR_CONNECTION_CLOSED, until I restarted it after 6 AM.

Comment 1 Pavel Cibulka 2016-04-13 05:30:58 UTC

Same problem reported on startcom:

https://forum.startcom.org/viewtopic.php?f=15&t=16198&st=0&sk=t&sd=a

Comment 2 William A. Rowe Jr. 2017-09-22 16:43:02 UTC

*** Bug 61013 has been marked as a duplicate of this bug. ***