From 6b5309cf417a7c629ae1a44c9420fe686804b626 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 1 Jun 2015 09:10:52 +0200
Subject: [PATCH] Enable OCSP stapling on jessie
---
modules/apache2/templates/puppet-config.erb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/modules/apache2/templates/puppet-config.erb b/modules/apache2/templates/puppet-config.erb
index fca5a8b4..5aa2c11f 100644
--- a/modules/apache2/templates/puppet-config.erb
+++ b/modules/apache2/templates/puppet-config.erb
@@ -8,5 +8,8 @@
SSLCipherSuite ECDH+AESGCM:ECDH+AES256:ECDH+AES128:ECDH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
<% else -%>
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
+
+ SSLUseStapling On
+ SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768)
<% end -%>
</IfModule>
--
2.39.5