Hi Marat, On 18.01.2018 08:37, Marat Khalili wrote: > Did you read > https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html > ? Judging by https://bz.apache.org/bugzilla/show_bug.cgi?id=57121 it is > still unfixed, I wonder why too. I did not... and the bug report seems to be asking for the exact functionality I was looking for (refresh of a still-valid ticket, only ever keeping valid tickets in cache). Sadly, more than 3 years old, that report :-/ Since OCSP/OCSP Stapling/OCSP Must Staple is becoming much more common recently, I'm hopeful it'll be added at some point in time. I was just so sure that it was my fault and I wasn't using Apache correctly (because the described behavior seems like the obvious way to go about it). At least now I know I'm not too stupid to RTFM :-) Thanks for your response, Joe --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx