Merge pull request #102 from linuxserver/ocsp

Disable OCSP stapling by default
This commit is contained in:
Eric Nemchik 2022-08-20 09:10:35 -05:00 committed by GitHub
commit 90d9b7f278
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -22,11 +22,11 @@ ssl_prefer_server_ciphers off;
#add_header Strict-Transport-Security "max-age=63072000" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;
#ssl_stapling on;
#ssl_stapling_verify on;
# verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /config/keys/cert.crt;
#ssl_trusted_certificate /config/keys/cert.crt;
# Optional additional headers
#add_header Cache-Control "no-transform" always;