Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Enable OCSP stapling on the proxies

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-07-28 23:01:20 +00:00
parent ea5ab7b453
commit 74502e1c52
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/httpd/proxy/templates/httpd.conf.j2
View file

@ -765,3 +765,6 @@ ProxyTimeout 1200
# Try and enable these to improve performance # Try and enable these to improve performance
EnableMMAP on EnableMMAP on
EnableSendfile on EnableSendfile on
# Configure a location for OCSP stapling
SSLStaplingCache shmcb:/tmp/stapling_cache(128000)

1
roles/httpd/website/templates/website.conf
View file

@ -57,6 +57,7 @@
{% endif %} {% endif %}
SSLEngine on SSLEngine on
SSLUseStapling on
{% if certbot %} {% if certbot %}
SSLCertificateFile /etc/pki/tls/certs/{{ site_name }}.cert SSLCertificateFile /etc/pki/tls/certs/{{ site_name }}.cert
SSLCertificateKeyFile /etc/pki/tls/private/{{ site_name }}.key SSLCertificateKeyFile /etc/pki/tls/private/{{ site_name }}.key