From f6e208f64faaf17dc13b203076b56d9234ce39e1 Mon Sep 17 00:00:00 2001 From: Jeff Zellen Date: Thu, 16 Jul 2020 22:43:01 -0400 Subject: [PATCH] OCSP Stapling Support for NGINX Added support for OCSP Stapling. Will not cause a problem is the cert does not have --must-staple. --- conf/nginx.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/conf/nginx.conf b/conf/nginx.conf index fafd3409..b0bc3ef1 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -42,6 +42,8 @@ server { ssl_certificate $SSL_CERTIFICATE; ssl_certificate_key $SSL_KEY; + ssl_stapling on; + ssl_stapling_verify on; # ADDITIONAL DIRECTIVES HERE }