[rs-commit] r202 - /rs-manual/trunk/src/site/xhtml5/mod/mod_timestamp.xhtml5

rs-commit at redwax.eu rs-commit at redwax.eu
Wed Dec 25 22:49:13 CET 2019


Author: dirkx at redwax.eu
Date: Wed Dec 25 22:49:12 2019
New Revision: 202

Log:
Some extra examples for the timeserver; including a fake/working client based on openssl.

Modified:
    rs-manual/trunk/src/site/xhtml5/mod/mod_timestamp.xhtml5

Modified: rs-manual/trunk/src/site/xhtml5/mod/mod_timestamp.xhtml5
==============================================================================
--- rs-manual/trunk/src/site/xhtml5/mod/mod_timestamp.xhtml5	(original)
+++ rs-manual/trunk/src/site/xhtml5/mod/mod_timestamp.xhtml5	Wed Dec 25 22:49:12 2019
@@ -3,30 +3,24 @@
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en">
   <head>
     <title>mod_timestamp Module</title>
-    <meta name="description" content="Parse and return responses to RFC3161 Time Stamp Protocol requests." />
-    <meta name="mod-ca-type" content="frontend" />
-    <link rel="canonical" href="https://redwax.eu/rs/docs/latest/mod/mod_timestamp.html" />
+    <meta name="description" content="Parse and return responses to RFC3161 Time Stamp Protocol requests."/>
+    <meta name="mod-ca-type" content="frontend"/>
+    <link rel="canonical" href="https://redwax.eu/rs/docs/latest/mod/mod_timestamp.html"/>
   </head>
   <body>
-
     <section class="spotlight style2 orient-right content-align-left image-position-left">
       <div class="content null">
         <h2>Time Stamp Protocol Module</h2>
         <p>Parse and return responses to RFC3161 Time Stamp Protocol requests.</p>
       </div>
       <div class="image">
-        <img src="../images/candles-red.jpg" alt="" />
+        <img src="../images/candles-red.jpg" alt=""/>
       </div>
     </section>
-
     <div class="none">
-
-      <section class="wrapper style1 align-center"
-        id="introduction">
+      <section class="wrapper style1 align-center" id="introduction">
         <div class="inner">
-
           <div class="index align-left">
-
             <section>
               <header>
                 <h3>What does it do?</h3>
@@ -37,22 +31,15 @@
                   Time Stamp Protocol</a> endpoint that supports assertions of proof that
                   a datum existed before a particular time.
                 </p>
-
                 <p>Based on configuration, an incoming POST request with a content type
                   of <code>application/timestamp-query</code> is received, the datum is
                   signed, and the response is returned as <code>application/timestamp-reply</code>.
                 </p>
-
-              </div>
-            </section>
-
-
+              </div>
+            </section>
           </div>
         </div>
       </section>
-
-
-
       <section class="wrapper style1 align-center" id="integration">
         <div class="inner">
           <h2>Module Integration</h2>
@@ -73,7 +60,6 @@
             <a href="mod_ca.html#backend">backend modules</a>
             must be configured to implement each hook as needed.
           </p>
-
           <p>
             All
             <a href="mod_ca.html#frontend">frontend modules</a>
@@ -81,13 +67,10 @@
             a standard Apache httpd request, and standard httpd functionality
             applies in all cases.
           </p>
-
           <div>
-            <img src="../images/mod_timestamp-1.png" style="width: 100%;" />
+            <img src="../images/mod_timestamp-1.png" style="width: 100%;"/>
           </div>
-
           <div class="index align-left">
-
             <section>
               <header>
                 <h3>
@@ -117,7 +100,6 @@
                 </table>
               </div>
             </section>
-
             <section>
               <header>
                 <h3>
@@ -141,19 +123,13 @@
                 </table>
               </div>
             </section>
-
           </div>
-
         </div>
       </section>
-
-
-      <section class="wrapper style1 align-center"
-        id="directive-reference">
+      <section class="wrapper style1 align-center" id="directive-reference">
         <div class="inner">
           <h2>Examples</h2>
           <div class="index align-left">
-
             <section>
               <header>
                 <h3>Basic Example</h3>
@@ -163,6 +139,10 @@
                   one.</p>
                 <pre>
                   <code><![CDATA[
+LoadModule ca_module /usr/local/libexec/apache-modules/mod_ca.so
+LoadModule ca_simple_module /usr/local/libexec/apache-modules/mod_ca_simple.so
+LoadModule timestamp_module /usr/local/libexec/apache-modules/mod_timestamp.so
+
 # backend configuration:
 <IfModule mod_ca_simple.c>
   # use system clock as the time source
@@ -183,13 +163,42 @@
     TimestampDigest SHA256
     # set the policy to an oid of your choice
     TimestampDefaultPolicy 1.2.3.4
+
+    # Allow anyone to get a signed timestamp
+    require all granted
   </Location>
 </IfModule>
 ]]></code>
                 </pre>
               </div>
-            </section>
-
+              <div>Note that it is essential that the timestamp sever certifcate (as set with <code>TimestampSigningCertificate</code>) has the key usage extensions <code>cirtical</code> and <code>timeStamping</code></div>
+              <div>
+These can be set by openssl (e.g. when testing) with:
+                <pre><code><![CDATA[
+# Generate an unencrypted keypair and a request.
+#
+openssl req -newkey rsa:1024 -nodes \
+   -subj   "/C=NL/ST=Zuid-Holland/L=Leiden/O=TimeServices/CN=Churchtower" \
+   -keyout /etc/pki/ssl/timestamp.key \
+   -out    /tmp/timestamp.csr 
+
+# Create a config file:
+#
+echo extendedKeyUsage=critical,timeStamping > ts.cnf
+
+# And (self sign) the request; with the required timestamp
+# key usage
+#
+openssl x509 -req -days 365 \
+    -in      /tmp/timestamp.csr \
+    -signkey /etc/pki/ssl/timestamp.key \
+    -out     /etc/pki/ssl/timestamp.cert.pem -extfile ts.cnf
+
+# And delete the request - it is no longer needed.
+rm /tmp/timestmap.csr
+]]></code></pre>
+</div>
+            </section>
             <section>
               <header>
                 <h3>Logged In Example</h3>
@@ -231,25 +240,48 @@
 ]]></code>
                 </pre>
               </div>
-            </section>
-
+              <p>Client implementations for RFC3160 can be found for most languages; and some applications have these build in (in that case  -the URI to enter for the above examples would be <code>https://fqdn.com/timestamp</code>.</p>
+              <p> It is also possible to use OpenSSL its build in <code>ts</code> utility; an example is show below; where a file caled <code>my-novel.doc</code> is timestamped (any binary file will do).</p>
+              <ol>
+                <li> First create a signing request for the file. What actually gets signed is the SHA256 (specified by the <code>-cert</code> flag).
+
+                <pre><code><![CDATA[
+openssl ts -query -data my-novel.doc -cert -sha256 -no_nonce -out request.tsq
+]]></code></pre></li>
+                <li> Then offer this to the signing server (assumed here to run localhost); as an HTTP POST request with the right content type. The reply is signed receipt (in binary, DER, format).
+                <pre><code><![CDATA[
+curl -H Content-type:application/timestamp-query --data-binary @request.tsq http://127.0.0.1/timestamp > reply.tsq
+]]></code></pre></li>
+                <li> You can now dump the content of this reply; 
+                <pre><code><![CDATA[
+openssl ts -reply -text -in reply.tsq
+openssl asn1parse -inform DER -in reply.tsq
+]]></code></pre>
+
+                <p>or, better, verify it against the timestamp certificate (or, with the chain, against any of the higher CA certificates as the root):</p>
+
+                <pre><code><![CDATA[
+openssl ts -verify -in reqply.tsq  -data my-novel.doc -CAfile /etc/pki/ssl/timestamp.cert
+]]></code></pre>
+
+                <p>Note: As we dit not set a 'nonce' in step 1 - we did not get one back (which you can use to verify against the one in the request). And in this particular case - we get a random `serial' number set by the time server (As we set <code>CASimpleSerialRandom</code> to <code>on</code> in the servr configuration).</p>
+
+                <p>In this case - we simply use the certificate set in the configuration file of the signing timeserver (by <code>TimestampSigningCertificate</code>) to verify. So we have no chain issues.</p>
+                </li>
+              </ol>
+            </section>
           </div>
         </div>
       </section>
-
-
-      <section class="wrapper style1 align-center"
-        id="directive-reference">
+      <section class="wrapper style1 align-center" id="directive-reference">
         <div class="inner">
           <h2>Directive Reference</h2>
           <div class="index align-left">
-
             <section id="directive-TimestampSigningCertificate">
               <header>
-                <h3>Timestamp<wbr />Signing<wbr />Certificate Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Signing<wbr/>Certificate Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -259,7 +291,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Signing<wbr />Certificate filename</code>
+                        <code>Timestamp<wbr/>Signing<wbr/>Certificate filename</code>
                       </td>
                     </tr>
                     <tr>
@@ -274,32 +306,30 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>Set to the name of the signing certificate.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampSigningKey">
               <header>
-                <h3>Timestamp<wbr />SigningKey Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>SigningKey Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -309,7 +339,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />SigningKey filename</code>
+                        <code>Timestamp<wbr/>SigningKey filename</code>
                       </td>
                     </tr>
                     <tr>
@@ -324,31 +354,29 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>Set to the name of the signing key.</p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampCertificateChain">
               <header>
-                <h3>Timestamp<wbr />CertificateChain Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>CertificateChain Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -358,7 +386,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />CertificateChain filename</code>
+                        <code>Timestamp<wbr/>CertificateChain filename</code>
                       </td>
                     </tr>
                     <tr>
@@ -373,32 +401,30 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>Set to the name of a file containing the rest of the certificate chain.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampSize">
               <header>
-                <h3>Timestamp<wbr />Size Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Size Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -409,47 +435,45 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Size bytes</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Default</td>
-                      <td>
-                        <code>Timestamp<wbr />Size 131072</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Context</td>
-                      <td>server config, virtual host, directory, .htaccess</td>
-                    </tr>
-                    <tr>
-                      <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                        <code>Timestamp<wbr/>Size bytes</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Default</td>
+                      <td>
+                        <code>Timestamp<wbr/>Size 131072</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Context</td>
+                      <td>server config, virtual host, directory, .htaccess</td>
+                    </tr>
+                    <tr>
+                      <td>Status</td>
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>Set to the maximum size of the timestamp request from the client.
                   This value cannot be smaller than 4096 bytes.</p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampLocation">
               <header>
-                <h3>Timestamp<wbr />Location Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Location Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -460,47 +484,45 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Location url</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Default</td>
-                      <td>
-                        <code>Timestamp<wbr />Location [current-URL]</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Context</td>
-                      <td>server config, virtual host, directory, .htaccess</td>
-                    </tr>
-                    <tr>
-                      <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                        <code>Timestamp<wbr/>Location url</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Default</td>
+                      <td>
+                        <code>Timestamp<wbr/>Location [current-URL]</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Context</td>
+                      <td>server config, virtual host, directory, .htaccess</td>
+                    </tr>
+                    <tr>
+                      <td>Status</td>
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>Set the URL location of the WADL returned by the OPTIONS
                   method.</p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampPolicy">
               <header>
-                <h3>Timestamp<wbr />Policy Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Policy Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -523,33 +545,31 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Add the given policy to the timestamp.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampDefaultPolicy">
               <header>
-                <h3>Timestamp<wbr />DefaultPolicy Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>DefaultPolicy Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -559,7 +579,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />DefaultPolicy oid</code>
+                        <code>Timestamp<wbr/>DefaultPolicy oid</code>
                       </td>
                     </tr>
                     <tr>
@@ -572,33 +592,31 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Set the given policy as the default timestamp policy.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampDigest">
               <header>
-                <h3>Timestamp<wbr />Digest Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Digest Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -608,7 +626,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Digest digest</code>
+                        <code>Timestamp<wbr/>Digest digest</code>
                       </td>
                     </tr>
                     <tr>
@@ -621,33 +639,31 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Add the given digest to the timestamp.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampIncludeChain">
               <header>
-                <h3>Timestamp<wbr />IncludeChain Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>IncludeChain Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -657,47 +673,45 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />IncludeChain flag</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Default</td>
-                      <td>Timestamp<wbr />IncludeChain off</td>
-                    </tr>
-                    <tr>
-                      <td>Context</td>
-                      <td>server config, virtual host, directory, .htaccess</td>
-                    </tr>
-                    <tr>
-                      <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                        <code>Timestamp<wbr/>IncludeChain flag</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Default</td>
+                      <td>Timestamp<wbr/>IncludeChain off</td>
+                    </tr>
+                    <tr>
+                      <td>Context</td>
+                      <td>server config, virtual host, directory, .htaccess</td>
+                    </tr>
+                    <tr>
+                      <td>Status</td>
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Indicate whether the certificate chain should be included in the ESS
                   signing certificate attribute within the response.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampOrdering">
               <header>
-                <h3>Timestamp<wbr />Ordering Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Ordering Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -707,46 +721,44 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Ordering flag</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Default</td>
-                      <td>Timestamp<wbr />Ordering off</td>
-                    </tr>
-                    <tr>
-                      <td>Context</td>
-                      <td>server config, virtual host, directory, .htaccess</td>
-                    </tr>
-                    <tr>
-                      <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                        <code>Timestamp<wbr/>Ordering flag</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Default</td>
+                      <td>Timestamp<wbr/>Ordering off</td>
+                    </tr>
+                    <tr>
+                      <td>Context</td>
+                      <td>server config, virtual host, directory, .htaccess</td>
+                    </tr>
+                    <tr>
+                      <td>Status</td>
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Set ordering to true in the response.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampTsaName">
               <header>
-                <h3>Timestamp<wbr />TsaName Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>TsaName Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -756,46 +768,44 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />TsaName flag</code>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td>Default</td>
-                      <td>Timestamp<wbr />TsaName off</td>
-                    </tr>
-                    <tr>
-                      <td>Context</td>
-                      <td>server config, virtual host, directory, .htaccess</td>
-                    </tr>
-                    <tr>
-                      <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                        <code>Timestamp<wbr/>TsaName flag</code>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Default</td>
+                      <td>Timestamp<wbr/>TsaName off</td>
+                    </tr>
+                    <tr>
+                      <td>Context</td>
+                      <td>server config, virtual host, directory, .htaccess</td>
+                    </tr>
+                    <tr>
+                      <td>Status</td>
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Set to include the TSA name in the response.
                 </p>
-
-              </div>
-            </section>
-
+              </div>
+            </section>
             <section id="directive-TimestampClockPrecisionDigits">
               <header>
-                <h3>Timestamp<wbr />Clock<wbr />Precision<wbr />Digits Directive</h3>
-              </header>
-              <div class="content">
-
+                <h3>Timestamp<wbr/>Clock<wbr/>Precision<wbr/>Digits Directive</h3>
+              </header>
+              <div class="content">
                 <table>
                   <tbody>
                     <tr>
@@ -805,7 +815,7 @@
                     <tr>
                       <td>Syntax</td>
                       <td>
-                        <code>Timestamp<wbr />Clock<wbr />Precision<wbr />Digits number</code>
+                        <code>Timestamp<wbr/>Clock<wbr/>Precision<wbr/>Digits number</code>
                       </td>
                     </tr>
                     <tr>
@@ -818,32 +828,29 @@
                     </tr>
                     <tr>
                       <td>Status</td>
-                      <td><a href="mod_ca.html#frontend">Frontend</a></td>
-                    </tr>
-                    <tr>
-                      <td>Module</td>
-                      <td>mod_timestamp</td>
-                    </tr>
-                    <tr>
-                      <td>Compatibility</td>
-                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
-                        Server 2.4.0 and later</td>
-                    </tr>
-                  </tbody>
-                </table>
-
+                      <td>
+                        <a href="mod_ca.html#frontend">Frontend</a>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Module</td>
+                      <td>mod_timestamp</td>
+                    </tr>
+                    <tr>
+                      <td>Compatibility</td>
+                      <td>Introduced in mod_timestamp 0.2.0 and works with Apache HTTP
+                        Server 2.4.0 and later</td>
+                    </tr>
+                  </tbody>
+                </table>
                 <p>
                   Set the number of clock precision digits.
                 </p>
-
-              </div>
-            </section>
-
-
+              </div>
+            </section>
           </div>
         </div>
       </section>
-
     </div>
   </body>
 </html>



More information about the rs-commit mailing list