X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/24ec2141b1f15d3553b47fa3b2e299bd826be1fe..55f07b266707be40843e951f5811e0de82b50fb5:/cookbooks/apache/templates/default/ssl.erb diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index ac25cc4bc..07f007c50 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -6,3 +6,9 @@ SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5 SSLCertificateFile /etc/ssl/certs/<%= @certificate %>.pem SSLCertificateKeyFile /etc/ssl/private/<%= @certificate %>.key SSLCertificateChainFile /etc/ssl/certs/rapidssl.pem +<% if node[:lsb][:release].to_f >= 14.04 -%> + +SSLUseStapling On +SSLStaplingReturnResponderErrors off +SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000) +<% end -%>