X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/b0e794ecd4ca2669d1f34c563ed2cfcc8b37a06c..643f28e4f32f013c16d04378d7d1f3dd7d8edc17:/cookbooks/apache/templates/default/ssl.erb?ds=inline diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index e117eeaed..17ee112b6 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -3,10 +3,11 @@ SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder On -SSLCipherSuite <%= node[:ssl][:ciphers] -%> +SSLCipherSuite <%= node[:ssl][:ciphers] %> +<% if node[:lsb][:release].to_f < 16.04 -%> -SSLCertificateFile /etc/ssl/certs/<%= @certificate %>.pem -SSLCertificateKeyFile /etc/ssl/private/<%= @certificate %>.key +SSLCertificateChainFile /etc/ssl/certs/letsencrypt.pem +<% end -%> SSLUseStapling On SSLStaplingResponderTimeout 5