accept
logger:
+ accept condition = ${if !eq {msg} {${listextract{1}{$tpda_event}}}}
warn logwrite = client ocsp status: $tls_out_ocsp \
(${listextract {${eval:$tls_out_ocsp+1}} \
{notreq:notresp:vfynotdone:failed:verified}})
hosts_require_tls = *
hosts_request_ocsp = :
headers_add = X-TLS-out: ocsp status $tls_out_ocsp
- tpda_delivery_action = ${acl {logger}}
- tpda_host_defer_action = ${acl {logger}}
+ tpda_event_action = ${acl {logger}}
# norequire: request stapling but do not verify
send_to_server2:
hosts_require_tls = *
# note no ocsp mention here
headers_add = X-TLS-out: ocsp status $tls_out_ocsp
- tpda_delivery_action = ${acl {logger}}
- tpda_host_defer_action = ${acl {logger}}
+ tpda_event_action = ${acl {logger}}
# (any other name): request and verify
send_to_server3:
hosts_require_tls = *
hosts_require_ocsp = *
headers_add = X-TLS-out: ocsp status $tls_out_ocsp
- tpda_delivery_action = ${acl {logger}}
- tpda_host_defer_action = ${acl {logger}}
+ tpda_event_action = ${acl {logger}}
# (any other name): request and verify, ssl-on-connect
send_to_server4:
hosts_require_tls = *
hosts_require_ocsp = *
headers_add = X-TLS-out: ocsp status $tls_out_ocsp
- tpda_delivery_action = ${acl {logger}}
- tpda_host_defer_action = ${acl {logger}}
+ tpda_event_action = ${acl {logger}}
# ----- Retry -----