Confirmed users
529
edits
Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
→OCSP Stapling support
| Line 307: | Line 307: | ||
# rspadd Strict-Transport-Security:\ max-age=15768000 | # rspadd Strict-Transport-Security:\ max-age=15768000 | ||
</pre> | </pre> | ||
== OCSP Stapling support == | === OCSP Stapling support === | ||
While HAProxy can serve OCSP stapled responses, it cannot fetch and update OCSP records from the CA automatically. The OCSP response must be downloaded by another process and placed next to the certificate, with a '.ocsp' extension. | While HAProxy can serve OCSP stapled responses, it cannot fetch and update OCSP records from the CA automatically. The OCSP response must be downloaded by another process and placed next to the certificate, with a '.ocsp' extension. | ||
<pre> | <pre> | ||