Re: [Openca-Users] ocspd logging level

[Massimiliano P. <pro...@op...>]

Julian Pawlowski (lists) wrote:
> Hey folks,

Hey,

> Can somebody please tell me how to change the default info logging level
> of the ocspd?

Actually there is not a logging level at the moment. Now the only setting
is at startup time. Use '-v' to have the daemon to log many informations or
do not use it to get just the minimum messages needed.

> My logfile is running out of memory if I would start using it without
> changing that *g*

Have you tried to install/configure the logrotate utility ?

> Additionally, does somebody know why firefox seems to check the
> certification validity with every normal web request? It seems to me
> that firefox does ignore the "next update" in the ocsp respond... :-/
> (or maybe it is a bug in firefox 2.0rc1?)

That is actually the behavior in Firefox.. it seems it does not cache
the responses as it should. Moreover have you noticed that it makes
2 different requests for the same certificate each time ? It is quite
strange (at least when you try to view a certificate).

Cheers,
    --- Max