From: Tom Hughes <tom@compton.nu>
Date: Mon, 30 Jan 2023 18:16:48 +0000 (+0000)
Subject: Drop deprecated Expect-CT header
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/315ae24f6372e75330817711384c1632887ea0ff

Drop deprecated Expect-CT header

https://github.com/openstreetmap/operations/issues/837
---

diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb
index ccfef6048..81afb3de5 100644
--- a/cookbooks/apache/templates/default/ssl.erb
+++ b/cookbooks/apache/templates/default/ssl.erb
@@ -13,8 +13,3 @@ SSLStaplingFakeTryLater off
 SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_ocspcache(512000)
 
 Header always set Strict-Transport-Security "<%= node[:ssl][:strict_transport_security] %>" "expr=%{HTTPS} == 'on'"
-<% if node[:ssl][:ct_report_uri] -%>
-Header always set Expect-CT "max-age=0, report-uri=\"<%= node[:ssl][:ct_report_uri] %>\"" "expr=%{HTTPS} == 'on'"
-<% else -%>
-Header always set Expect-CT "max-age=0" "expr=%{HTTPS} == 'on'"
-<% end -%>