Header Cert Authentication

the ssl_verify option to switch verification of the certificate presented by the server of the OCSP responder’s URL and by the server of the CRL Distribution Point is now enabled by default.

added support for the tls_certificate_verify global option. When this option is enabled, the plugin’s ssl_verify flag cannot be disabled.

added the flag ssl_verify to control certificate verification when connecting to the server of the OCSP responder’s URL and to the server of the CRL Distribution Point.

Fixed an issue where Header Cert Authentication plugin failed to validate revocation using OCSP when the downstream connection wasn’t an SSL connection.

Fixed an issue where Header Cert Authentication plugin failed to validate revocation using OCSP when the downstream connection wasn’t an SSL connection.

Added a new plugin for header-based certificate authentication.