lighty labs

2021-01-15

22:20 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

I'm running 64-bit lighttpd (amd64).
I run now with patches (no condition, logging pc->ssl_stapling_nextts) until ... flynn

22:06 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

Should I add a log message to monitor pc->ssl_stapling_nextts in the error log? flynn

21:50 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

With this patch I see periodic stat calls in strace and openat of the stapling file after a change of the timestamp w... flynn

20:49 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

Looks good:
Cert Status: good
This Update: Jan 12 11:00:00 2021 GMT
Next Update: Jan 19 11:00:00 202... flynn

20:31 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

The ssl.stapling-file has an updated timstamp which corresponds to the date of the cron job.
I ran 4 minutes strac... flynn

19:50 Lighttpd Bug #3056: OCSP Stapling reload seems not to work

I use the TLS module mod_openssl.
I do NOT see any ocsp related log messages in the error log.
flynn

2021-01-14

12:07 Lighttpd Bug #3056 (New): OCSP Stapling reload seems not to work

From my observation the periodicylly reload of the OCSP stapling does not work, I always have to restart lighttpd to ... flynn

2020-12-23

11:03 Lighttpd Bug #3033: Memory Growth with PUT and full buffered streams

I'll test this und report in a few days ... flynn

2020-12-22

15:36 Lighttpd Bug #3033: Memory Growth with PUT and full buffered streams

Contrary to what I claimed before, I can now reproduce the problem with a pure GET request:
* big response, e.g. 50M... flynn

11:43 Lighttpd Bug #3033: Memory Growth with PUT and full buffered streams

@server.stream-response-body = 1
server.stream-request-body = 0@
The memory growth correlates with HTTP/1.1 PUT-r... flynn