Bug 918120: reduce soft fail ocsp timeouts to 3 secs. r=bsmith.

This commit is contained in:
Camilo Viecco 2013-09-23 09:25:53 -07:00
parent 610685c38b
commit 099c910276

View File

@ -934,6 +934,12 @@ void nsNSSComponent::setValidationOptions()
ocspMode_FailureIsVerificationFailure
: ocspMode_FailureIsNotAVerificationFailure);
int OCSPTimeoutSeconds = 3;
if (ocspRequired || anyFreshRequired) {
OCSPTimeoutSeconds = 10;
}
CERT_SetOCSPTimeout(OCSPTimeoutSeconds);
mDefaultCertVerifier = new CertVerifier(
aiaDownloadEnabled ?
CertVerifier::missing_cert_download_on : CertVerifier::missing_cert_download_off,