From 315ae24f6372e75330817711384c1632887ea0ff Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Mon, 30 Jan 2023 18:16:48 +0000 Subject: [PATCH] Drop deprecated Expect-CT header https://github.com/openstreetmap/operations/issues/837 --- cookbooks/apache/templates/default/ssl.erb | 5 ----- 1 file changed, 5 deletions(-) diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index ccfef6048..81afb3de5 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -13,8 +13,3 @@ SSLStaplingFakeTryLater off SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000) Header always set Strict-Transport-Security "<%= node[:ssl][:strict_transport_security] %>" "expr=%{HTTPS} == 'on'" -<% if node[:ssl][:ct_report_uri] -%> -Header always set Expect-CT "max-age=0, report-uri=\"<%= node[:ssl][:ct_report_uri] %>\"" "expr=%{HTTPS} == 'on'" -<% else -%> -Header always set Expect-CT "max-age=0" "expr=%{HTTPS} == 'on'" -<% end -%> -- 2.39.5