From c05b9d1f8b4842963c6ade81d70573eb0f7e1273 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 25 Nov 2016 15:26:27 +0100
Subject: [PATCH] Do not return OCSP errors to clients

---
 modules/apache2/templates/puppet-config.erb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/apache2/templates/puppet-config.erb b/modules/apache2/templates/puppet-config.erb
index fa9a210d6..0ed3e1910 100644
--- a/modules/apache2/templates/puppet-config.erb
+++ b/modules/apache2/templates/puppet-config.erb
@@ -25,5 +25,6 @@
     # [ https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#ocspstapling ]
 
     SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(1048576)
+    SSLStaplingReturnResponderErrors off
   <% end -%>
 </IfModule>
-- 
2.20.1