Skip to content

Commit dfe7677

Browse files
committed
Enable OCSP stapling if certificate trust chain is provided
Previously disabled in 080a515
1 parent 0cc71fa commit dfe7677

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,7 @@ and `CERT_NAME=shared` will then use this shared cert.
206206
The SSL cipher configuration is based on the [Mozilla nginx intermediate profile](https://wiki.mozilla.org/Security/Server_Side_TLS#Nginx) which
207207
should provide compatibility with clients back to Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1,
208208
Windows XP IE8, Android 2.3, Java 7. Note that the DES-based TLS ciphers were removed for security.
209-
The configuration also enables HSTS, PFS, and SSL session caches. Currently TLS 1.0, 1.1 and 1.2
209+
The configuration also enables HSTS, PFS, OCSP stapling and SSL session caches. Currently TLS 1.0, 1.1 and 1.2
210210
are supported. TLS 1.0 is deprecated but its end of life is not until June 30, 2018. It is being
211211
included because the following browsers will stop working when it is removed: Chrome < 22, Firefox < 27,
212212
IE < 11, Safari < 7, iOS < 5, Android Browser < 5.

0 commit comments

Comments
 (0)