Alan Orth 6ccfdb99fa roles/nginx: Enable OCSP stapling ... Reduces round trip time for clients. Note: I am using a certificate chain in the `ssl_certificate' directive, so as I understand it, I don't need to use an explicit trusted intermediate + root CA cert with the `ssl_trusted_certificate' option. See the nginx docs for more[0]. Addresses GitHub Issue #5. Seems to be working, test with: $ openssl s_client -connect mjanja.ch:443 -servername mjanja.ch -tls1 -tlsextdebug -status Look for "OCSP Response" with "Cert Status: good". [0] http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling Signed-off-by: Alan Orth <alan.orth@gmail.com>		2014-12-06 23:28:05 +03:00
..
https.j2	roles/nginx: Enable OCSP stapling	2014-12-06 23:28:05 +03:00
vhost.conf.j2	roles/nginx: Tweaks for vhosts with WordPress	2014-09-07 22:51:34 +03:00
wordpress.j2	roles/nginx: Add comment about try_files for serving static files from disk	2014-11-07 00:41:07 +03:00