浏览代码

Remove ocsp stapling in Nginx (for now)

Emmanuel Bouthenot 6 年之前
父节点
当前提交
08704148f7
共有 1 个文件被更改,包括 0 次插入5 次删除
  1. 0 5
      roles/webserver/templates/nginx/nginx.conf.j2

+ 0 - 5
roles/webserver/templates/nginx/nginx.conf.j2

@@ -165,11 +165,6 @@ http {
     ssl_session_timeout  5m;
     ssl_session_tickets off;
 
-    # OCSP Stapling
-    # fetch OCSP records from URL in ssl_certificate and cache them
-    ssl_stapling on;
-    ssl_stapling_verify on;
-
     # This default SSL certificate will be served whenever the client lacks support for SNI (Server Name Indication).
     # Make it a symlink to the most important certificate you have, so that users of IE 8 and below on WinXP can see your main site without SSL errors.
     #ssl_certificate      /etc/nginx/default_ssl.crt;