From 5c20fcd431fed9d1a65d98332be95f877f5243c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexander=20Malmstr=C3=B6m?= Date: Tue, 28 Jul 2026 19:29:28 +0200 Subject: [PATCH 1/2] Disabling OCSP stapling --- modules/apache/templates/default-ssl.conf.erb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/modules/apache/templates/default-ssl.conf.erb b/modules/apache/templates/default-ssl.conf.erb index f04d9ff0..d5380343 100644 --- a/modules/apache/templates/default-ssl.conf.erb +++ b/modules/apache/templates/default-ssl.conf.erb @@ -2,7 +2,6 @@ # All manual changes will be overwritten - SSLStaplingCache "shmcb:logs/stapling-cache(150000)" DocumentRoot /var/www/html @@ -23,7 +22,7 @@ # Requires Apache >=2.4.11 #SSLSessionTickets Off SSLCompression off - SSLUseStapling on + SSLUseStapling off SSLOptions +StrictRequire SSLCertificateFile /etc/ssl/certs/server-fullchain.crt From 18a371e59217f079506b354d57abfe64c81ac636 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexander=20Malmstr=C3=B6m?= Date: Tue, 28 Jul 2026 22:00:27 +0200 Subject: [PATCH 2/2] Disable SSL stapling in default SSL config --- modules/apache/templates/default-ssl.conf.erb | 1 - 1 file changed, 1 deletion(-) diff --git a/modules/apache/templates/default-ssl.conf.erb b/modules/apache/templates/default-ssl.conf.erb index d5380343..cad34530 100644 --- a/modules/apache/templates/default-ssl.conf.erb +++ b/modules/apache/templates/default-ssl.conf.erb @@ -22,7 +22,6 @@ # Requires Apache >=2.4.11 #SSLSessionTickets Off SSLCompression off - SSLUseStapling off SSLOptions +StrictRequire SSLCertificateFile /etc/ssl/certs/server-fullchain.crt