From 53f84a8092421690d9d33d72fb0dbdcaa0ed86cc Mon Sep 17 00:00:00 2001
From: Joshua Tauberer <jt@occams.info>
Date: Sat, 27 Jun 2015 07:14:16 -0400
Subject: [PATCH] set ssl_stapling_verify back to on, reverts part of
 47de93961e88d3790120caeece0648ed6ab2c44c

The sslmate guidance changed. See #458.
---
 conf/nginx-ssl.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/nginx-ssl.conf b/conf/nginx-ssl.conf
index 1ce0f0c3..b6063502 100644
--- a/conf/nginx-ssl.conf
+++ b/conf/nginx-ssl.conf
@@ -69,6 +69,6 @@ ssl_dhparam STORAGE_ROOT/ssl/dh2048.pem;
 # 8.8.8.8 and 8.8.4.4 below are Google's public IPv4 DNS servers. 
 # nginx will use them to talk to the CA.
 ssl_stapling on;
-ssl_stapling_verify off;
+ssl_stapling_verify on;
 resolver 127.0.0.1 valid=86400;
 resolver_timeout 10;