nginx/application: Enabled OCSP Stapling

5 years ago · 9ba13c5d73
parent 22f14189c2
commit 9ba13c5d73
1 changed files with 3 additions and 0 deletions
--- a/roles/nginx/application/templates/ssl.conf
+++ b/roles/nginx/application/templates/ssl.conf
@ -3,3 +3,6 @@ ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECD
 ssl_prefer_server_ciphers off;
 ssl_session_cache shared:SSL:10m;
 ssl_session_timeout 10m;
+ssl_stapling on;
+ssl_stapling_verify on;
+ssl_trusted_certificate /etc/ssl/certs/ISRG_Root_X1.pem;