There is an occasional use case where it makes sense to deliberately cache and serve an OCSP response for an expired certificate. It would be nice if I could provide a parameter to stapled (for an individual cert) that would ignore a stale response and cache it anyway.
There is an occasional use case where it makes sense to deliberately cache and serve an OCSP response for an expired certificate. It would be nice if I could provide a parameter to stapled (for an individual cert) that would ignore a stale response and cache it anyway.