ISTI-ansible-roles
/
ansible-roles
5
0
Fork 3
Code Issues Pull Requests Releases Wiki Activity

letsencrypt and haproxy: disable the OCSP 'must staple' option.

This commit is contained in:
Andrea Dell'Amico 2018-01-02 14:43:43 +01:00
parent e9392f9586
commit f3c4c6eb27
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
haproxy/templates/haproxy-letsencrypt-acme.sh.j2
View File

@ -33,7 +33,7 @@ fi
# Run the OCSP stapling script # Run the OCSP stapling script
if [ -x /usr/local/bin/hapos-upd ] ; then if [ -x /usr/local/bin/hapos-upd ] ; then
echo "Run the OCSP stapling updater script" >> $LE_LOG_DIR/haproxy.log echo "Run the OCSP stapling updater script" >> $LE_LOG_DIR/haproxy.log
/usr/local/bin/hapos-upd --cert {{ haproxy_cert_dir }}/haproxy.pem -v {{ letsencrypt_acme_certs_dir }}/fullchain -s {{ haproxy_admin_socket }} >> $LE_LOG_DIR/haproxy.log 2>&1 /usr/local/bin/hapos-upd --cert {{ haproxy_cert_dir }}/haproxy.pem -v {{ letsencrypt_acme_certs_dir }}/fullchain -s {{ haproxy_admin_socket }} -v - >> $LE_LOG_DIR/haproxy.log 2>&1
else else
echo "No OCPS stapling updater script" >> $LE_LOG_DIR/haproxy.log echo "No OCPS stapling updater script" >> $LE_LOG_DIR/haproxy.log
fi fi