From f3d215edab51cc8ddeb90b677e4039d2d0bd32fe Mon Sep 17 00:00:00 2001
From: Grant Slater <github@firefishy.com>
Date: Tue, 22 Jul 2025 21:39:18 +0100
Subject: [PATCH] apache: No longer enable OCSP stapling

---
 cookbooks/apache/templates/default/ssl.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb
index 81afb3de5..6ddb01b90 100644
--- a/cookbooks/apache/templates/default/ssl.erb
+++ b/cookbooks/apache/templates/default/ssl.erb
@@ -5,7 +5,7 @@ SSLProtocol All -SSLv2 -SSLv3
 SSLHonorCipherOrder On
 SSLCipherSuite <%= node[:ssl][:openssl_ciphers] %>
 
-SSLUseStapling On
+SSLUseStapling off
 SSLStaplingResponderTimeout 5
 SSLStaplingErrorCacheTimeout 60
 SSLStaplingReturnResponderErrors off
-- 
2.39.5