Skip to content

Commit 080a515

Browse files
committed
Remove OCSP stapling
Looks like it was not actually working before and failing silently because ssl_trusted_certificate was not specified. Will need to revisit implementing this functionality so removing it for now to prevent the warnings logged by nginx now.
1 parent 3c58432 commit 080a515

File tree

2 files changed

+1
-3
lines changed

2 files changed

+1
-3
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ and `CERT_NAME=shared` will then use this shared cert.
8282

8383
The SSL cipher configuration is based on [mozilla nginx intermediate profile](https://wiki.mozilla.org/Security/Server_Side_TLS#Nginx) which
8484
should provide compatibility with clients back to Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1,
85-
Windows XP IE8, Android 2.3, Java 7. The configuration also enables OCSP stapling, HSTS, and SSL
85+
Windows XP IE8, Android 2.3, Java 7. The configuration also enables HSTS, and SSL
8686
session caches.
8787

8888
The behavior for the proxy when port 80 and 443 are exposed is as follows:

nginx.tmpl

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -96,8 +96,6 @@ server {
9696
ssl_prefer_server_ciphers on;
9797
ssl_session_timeout 5m;
9898
ssl_session_cache shared:SSL:50m;
99-
ssl_stapling on;
100-
ssl_stapling_verify on;
10199

102100
ssl_certificate /etc/nginx/certs/{{ (printf "%s.crt" $cert) }};
103101
ssl_certificate_key /etc/nginx/certs/{{ (printf "%s.key" $cert) }};

0 commit comments

Comments
 (0)