disable OCSP stapling

GrapheneOS · Dec 15, 2024 · 250c40d · 250c40d
1 parent 03367d5
commit 250c40d
Showing 1 changed file with 0 additions and 5 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -81,11 +81,6 @@ http {
     ssl_session_timeout 1d;
     ssl_buffer_size 4k;
 
-    ssl_trusted_certificate /etc/letsencrypt/live/staging.attestation.app/chain.pem;
-    ssl_stapling on;
-    ssl_stapling_verify on;
-    ssl_stapling_file /var/cache/certbot-ocsp-fetcher/staging.attestation.app.der;
-
     log_format main '$connection-$connection_requests $remote_addr $remote_user $ssl_session_reused $ssl_protocol $server_protocol '
         '$host $request_method "$request_uri" $status $request_length $body_bytes_sent/$bytes_sent '
         '$request_time $upstream_connect_time/$upstream_header_time/$upstream_response_time '