X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/24ec2141b1f15d3553b47fa3b2e299bd826be1fe..3fd693994f6be14e2a818232a70a6232903ec403:/cookbooks/apache/templates/default/ssl.erb diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index ac25cc4bc..9f453858b 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -6,3 +6,10 @@ SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5 SSLCertificateFile /etc/ssl/certs/<%= @certificate %>.pem SSLCertificateKeyFile /etc/ssl/private/<%= @certificate %>.key SSLCertificateChainFile /etc/ssl/certs/rapidssl.pem +<% if node[:lsb][:release].to_f >= 14.04 -%> + +SSLUseStapling On +SSLStaplingResponderTimeout 5 +SSLStaplingReturnResponderErrors off +SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000) +<% end -%>