From 839ad56c90d3979fffbb9c18d0f2d10eb6f56566 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 12 Jan 2018 18:43:01 +0000 Subject: [PATCH 1/1] Increase HSTS expiry --- cookbooks/apache/templates/default/ssl.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index 7b16c1bbd..df7c2578d 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -16,4 +16,4 @@ SSLStaplingReturnResponderErrors off SSLStaplingFakeTryLater off SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000) -Header setifempty Strict-Transport-Security max-age=3600 env=HTTPS +Header setifempty Strict-Transport-Security max-age=86400 env=HTTPS -- 2.43.2