Disable OCSP stapling on the default vhost

It can't work since we don't run an OCSP responder.

diff --git a/modules/apache2/templates/default-debian.org-ssl.erb b/modules/apache2/templates/default-debian.org-ssl.erb
index 081eb42..a6fcaa2 100644 (file)
--- a/modules/apache2/templates/default-debian.org-ssl.erb
+++ b/modules/apache2/templates/default-debian.org-ssl.erb
@@ -10,6 +10,7 @@
        SSLCertificateFile     /etc/ssl/debian/certs/thishost-server.crt
        SSLCertificateKeyFile  /etc/ssl/private/thishost-server.key
        SSLCertificateChainFile /etc/ssl/debian/certs/ca.crt
+       SSLUseStapling off
 
        ErrorLog /var/log/apache2/error.log
        CustomLog /var/log/apache2/access.log privacy