ocsp-max-response-size

ocsp-max-response-size = number of bytes

Description

Set the maximum response size (in bytes) that will be accepted as a response from an OCSP responder. This limit helps protect against a denial of service attack.

Options

number of bytes

Maximum response size, in bytes. A value of zero (0) indicates the value is not set in the configuration file and no call to GSKit will be made to adjust its value; in this case, the option will assume the GSKit default of 20480 bytes.Non-zero values will be passed on to GSKit.

Usage: Optional

Default:

204080

Example:

ocsp-max-response-size = 20480

Parent topic: [ssl] stanza