From 9f987584cc63070c5d80daacba772db5f3a35dae Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Fri, 25 Nov 2016 15:22:29 +0100 Subject: [PATCH] raise cache size --- modules/apache2/templates/puppet-config.erb | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/modules/apache2/templates/puppet-config.erb b/modules/apache2/templates/puppet-config.erb index da966d3ab..fa9a210d6 100644 --- a/modules/apache2/templates/puppet-config.erb +++ b/modules/apache2/templates/puppet-config.erb @@ -12,6 +12,18 @@ <%- if has_variable?("apache2deb9") && apache2deb9 == "true" -%> SSLUseStapling On - SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768) + + # the default size is 32k, but we make it 1M. + # | If more than a few SSL certificates are used for the server + # | + # | OCSP responses are stored in the SSL stapling cache. While the + # | responses are typically a few hundred to a few thousand bytes in size, + # | mod_ssl supports OCSP responses up to around 10K bytes in size. With more + # | than a few certificates, the stapling cache size (32768 bytes in the + # | example above) may need to be increased. Error message AH01929 will be + # | logged in case of an error storing a response. + # [ https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#ocspstapling ] + + SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(1048576) <% end -%> -- 2.20.1