apache ssl: faster timeout on slow OCSP responses

[chef.git] / cookbooks / chef / templates / default / client.rb.erb

diff --git a/cookbooks/chef/templates/default/client.rb.erb b/cookbooks/chef/templates/default/client.rb.erb
index e4bba9250e94464f5b536a62df40d824f5d7c2fa..6c9113968a2867e3a73ef11d616db08874711936 100644 (file)
--- a/cookbooks/chef/templates/default/client.rb.erb
+++ b/cookbooks/chef/templates/default/client.rb.erb
@@ -21,9 +21,9 @@ log_level :info
 
 log_location "/var/log/chef/client.log"
 
-# Don't verify SSL certificates
+# Verify SSL certificates
 
-ssl_verify_mode :verify_none
+ssl_verify_mode :verify_peer
 
 # Set the URL for the chef server