Преглед изворни кода

Remove ocsp stapling in Nginx (for now)

Emmanuel Bouthenot пре 6 година
родитељ
комит
08704148f7
1 измењених фајлова са 0 додато и 5 уклоњено
  1. 0 5
      roles/webserver/templates/nginx/nginx.conf.j2

+ 0 - 5
roles/webserver/templates/nginx/nginx.conf.j2

@@ -165,11 +165,6 @@ http {
     ssl_session_timeout  5m;
     ssl_session_tickets off;
 
-    # OCSP Stapling
-    # fetch OCSP records from URL in ssl_certificate and cache them
-    ssl_stapling on;
-    ssl_stapling_verify on;
-
     # This default SSL certificate will be served whenever the client lacks support for SNI (Server Name Indication).
     # Make it a symlink to the most important certificate you have, so that users of IE 8 and below on WinXP can see your main site without SSL errors.
     #ssl_certificate      /etc/nginx/default_ssl.crt;