Enable OCSP stapling on jessie
authorPeter Palfrader <peter@palfrader.org>
Mon, 1 Jun 2015 07:10:52 +0000 (09:10 +0200)
committerPeter Palfrader <peter@palfrader.org>
Mon, 1 Jun 2015 07:10:52 +0000 (09:10 +0200)
modules/apache2/templates/puppet-config.erb

index fca5a8b..5aa2c11 100644 (file)
@@ -8,5 +8,8 @@
     SSLCipherSuite ECDH+AESGCM:ECDH+AES256:ECDH+AES128:ECDH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
   <% else -%>
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
+
+    SSLUseStapling On
+    SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768)
   <% end -%>
 </IfModule>