From: Julien Cristau Date: Mon, 30 Oct 2017 19:14:37 +0000 (+0100) Subject: Disable OCSP stapling on the default vhost X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=32ecd49c75ea41bb9b51538e78145994e7f5a829;p=mirror%2Fdsa-puppet.git Disable OCSP stapling on the default vhost It can't work since we don't run an OCSP responder. --- diff --git a/modules/apache2/templates/default-debian.org-ssl.erb b/modules/apache2/templates/default-debian.org-ssl.erb index 081eb4227..a6fcaa280 100644 --- a/modules/apache2/templates/default-debian.org-ssl.erb +++ b/modules/apache2/templates/default-debian.org-ssl.erb @@ -10,6 +10,7 @@ SSLCertificateFile /etc/ssl/debian/certs/thishost-server.crt SSLCertificateKeyFile /etc/ssl/private/thishost-server.key SSLCertificateChainFile /etc/ssl/debian/certs/ca.crt + SSLUseStapling off ErrorLog /var/log/apache2/error.log CustomLog /var/log/apache2/access.log privacy