ce0c93a681
1618: add OCSP stapling to nginx.conf r=mergify[bot] a=lub It's not added in tls.conf, because apparently the mail ssl module doesnt' support OCSP stapling. https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling ^ exists https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_stapling ^ missing When the configured certificate doesn't have OCSP information, it'll just log a warning during startup. ## What type of PR? enhancement ## What does this PR do? It enables OCSP stapling for the http server. OCSP stapling reduces roundtrips for the client and reduces load on OCSP responders. ### Related issue(s) - fixes #1616 ## Prerequistes Before we can consider review and merge, please make sure the following list is done and checked. If an entry in not applicable, you can check it or remove it from the list. - [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file. Co-authored-by: lub <git@lubiland.de> |
4 years ago | |
|---|---|---|
| .. | ||
| conf | 4 years ago | |
| static | 6 years ago | |
| Dockerfile | 5 years ago | |
| certwatcher.py | 5 years ago | |
| config.py | 5 years ago | |
| letsencrypt.py | 6 years ago | |
| start.py | 6 years ago | |