From 7a4a98ed1937519a782efadaba9b829c9013c183 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 25 Nov 2016 15:11:54 +0100
Subject: [PATCH] enable stapling on stretch apache2

---
 modules/apache2/templates/puppet-config.erb | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/apache2/templates/puppet-config.erb b/modules/apache2/templates/puppet-config.erb
index fca5a8b44..da966d3ab 100644
--- a/modules/apache2/templates/puppet-config.erb
+++ b/modules/apache2/templates/puppet-config.erb
@@ -9,4 +9,9 @@
   <% else -%>
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
   <% end -%>
+
+  <%- if has_variable?("apache2deb9") && apache2deb9 == "true" -%>
+    SSLUseStapling On
+    SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768)
+  <% end -%>
 </IfModule>
-- 
2.20.1