Skip to content

Commit 74f3d1d

Browse files
Merge pull request #13627 from nextcloud/backport/13607/stable32
[stable32] fix(nginx): `ssl_stapling` should be `off` with Let's Encrypt
2 parents f1e2811 + e45abfb commit 74f3d1d

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

admin_manual/installation/nginx.rst

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,8 @@ NGINX configuration
2020
- Adjust the :code:`ssl_certificate` and :code:`ssl_certificate_key` directives to the real paths for your signed
2121
certificate and private key. Make sure your SSL certificates are readable by the nginx server process (see `nginx HTTPS SSL
2222
Module documentation <https://wiki.nginx.org/HttpSslModule>`_).
23+
- If using Let's Encrypt as TLS certificate and nginx as webserver, set `ssl_stapling` and `ssl_stapling_verify` to `off`
24+
in main nginx config (see [Let's Encrypt blog post](https://letsencrypt.org/2024/12/05/ending-ocsp)).
2325
- Be careful about line breaks if you copy the examples, as long lines may be
2426
broken for page display and result in an invalid configuration files.
2527
- Some environments might need a ``cgi.fix_pathinfo`` set to ``1`` in their

0 commit comments

Comments
 (0)