diff --git a/core/nginx/conf/tls.conf b/core/nginx/conf/tls.conf index f663bfd2..4372c5af 100644 --- a/core/nginx/conf/tls.conf +++ b/core/nginx/conf/tls.conf @@ -3,7 +3,6 @@ ssl_certificate_key {{ TLS[1] }}; {% if TLS_FLAVOR in ['letsencrypt','mail-letsencrypt'] %} ssl_certificate {{ TLS[2] }}; ssl_certificate_key {{ TLS[3] }}; -ssl_trusted_certificate /etc/ssl/certs/ca-cert-DST_Root_CA_X3.pem; {% endif %} ssl_session_timeout 1d; ssl_session_tickets off; diff --git a/towncrier/newsfragments/2199.bugfix b/towncrier/newsfragments/2199.bugfix new file mode 100644 index 00000000..94d28888 --- /dev/null +++ b/towncrier/newsfragments/2199.bugfix @@ -0,0 +1 @@ +Removed `ssl_trusted_certificate` configuration setting from nginx. Fixes an issue with nginx when letsencrypt or mail-letsencrypt is used.