certbot-ocsp-fetcher for reliable OCSP stapling

This commit is contained in:
Daniel Micay 2020-04-05 04:13:05 -04:00
parent 71be7342ab
commit ef179138fa

View File

@ -9,3 +9,5 @@ ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on;
ssl_stapling_verify on;
# maintained by certbot-ocsp-fetcher
ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der;