X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/429671f3522169d59628ad61852712f6ef840145..0d173e941fee49bf2e74ebb12537a83c84a22148:/cookbooks/apache/templates/default/ssl.erb?ds=sidebyside diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index 9f20fb632..81afb3de5 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -4,10 +4,6 @@ SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder On SSLCipherSuite <%= node[:ssl][:openssl_ciphers] %> -<% if node[:lsb][:release].to_f < 16.04 -%> - -SSLCertificateChainFile /etc/ssl/certs/letsencrypt.pem -<% end -%> SSLUseStapling On SSLStaplingResponderTimeout 5 @@ -17,4 +13,3 @@ SSLStaplingFakeTryLater off SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000) Header always set Strict-Transport-Security "<%= node[:ssl][:strict_transport_security] %>" "expr=%{HTTPS} == 'on'" -Header always set Expect-CT "max-age=0, report-uri=\"https://openstreetmap.report-uri.com/r/d/ct/reportOnly\"" "expr=%{HTTPS} == 'on'