From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 25 Nov 2016 14:26:27 +0000 (+0100)
Subject: Do not return OCSP errors to clients
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=c05b9d1f8b4842963c6ade81d70573eb0f7e1273;p=mirror%2Fdsa-puppet.git

Do not return OCSP errors to clients
---

diff --git a/modules/apache2/templates/puppet-config.erb b/modules/apache2/templates/puppet-config.erb
index fa9a210d6..0ed3e1910 100644
--- a/modules/apache2/templates/puppet-config.erb
+++ b/modules/apache2/templates/puppet-config.erb
@@ -25,5 +25,6 @@
     # [ https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#ocspstapling ]
 
     SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(1048576)
+    SSLStaplingReturnResponderErrors off
   <% end -%>
 </IfModule>