diff --git a/certbot-replicate b/certbot-replicate index aab07d55..ef7d9cf4 100755 --- a/certbot-replicate +++ b/certbot-replicate @@ -11,7 +11,6 @@ for replica in ${replicas[@]}; do echo rsync -rpcvl --delete --fsync --preallocate /etc/letsencrypt/ $replica:/etc/letsencrypt && - rsync -rpcvl --delete --fsync --preallocate /var/cache/certbot-ocsp-fetcher/ $replica:/var/cache/certbot-ocsp-fetcher && ssh root@$replica nginx -s reload || status=1 done diff --git a/nginx/nginx.conf b/nginx/nginx.conf index d4716ed9..28fb9d92 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -66,11 +66,6 @@ http { ssl_session_timeout 1d; ssl_buffer_size 4k; - ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem; - ssl_stapling on; - ssl_stapling_verify on; - ssl_stapling_file /var/cache/certbot-ocsp-fetcher/grapheneos.org.der; - log_format main '$connection-$connection_requests $remote_addr $remote_user $ssl_session_reused $ssl_protocol $server_protocol ' '$host $request_method "$request_uri" $status $request_length $body_bytes_sent/$bytes_sent ' '$request_time $upstream_connect_time/$upstream_header_time/$upstream_response_time ' diff --git a/static/features.html b/static/features.html index 1dc71e9a..1a650d21 100644 --- a/static/features.html +++ b/static/features.html @@ -1489,7 +1489,6 @@ when sending mail including alert messages from the attestation service
SameSite=Strict
,
Secure
, HttpOnly
, and Path=/
flags, prefixed with