diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en index 7991455fd8..96ed2e1433 100644 --- a/docs/manual/mod/mod_ssl.html.en +++ b/docs/manual/mod/mod_ssl.html.en @@ -2420,13 +2420,13 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961.

diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 4032bdb8e0..87a23e1eee 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -2278,14 +2278,14 @@ for its own certificate in the TLS handshake. Configuring an prerequisite for enabling OCSP stapling.

OCSP stapling relieves the client of querying the OCSP responder -on its own, but it should be noted that in its current specification, +on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), -stapling in its current form therefore only partially achieves the -stated goal of "saving roundtrips and resources" - see also the -"Adding Multiple TLS Certificate Status Extension requests" Internet draft. +stapling in its current implementation therefore only partially achieves the +stated goal of "saving roundtrips and resources" - see also +RFC 6961 +(TLS Multiple Certificate Status Extension).