ocsp stapling: Use 1.1.1.1 and 9.9.9.9 instead of 8.8.8.8

This commit is contained in:
Alexandre Aubin 2023-07-10 19:10:54 +02:00 committed by GitHub
parent dc5fbd5555
commit c0c0fcaf54
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -54,7 +54,7 @@ server {
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
ssl_trusted_certificate /etc/yunohost/certs/{{ domain }}/crt.pem; ssl_trusted_certificate /etc/yunohost/certs/{{ domain }}/crt.pem;
resolver 8.8.8.8 valid=300s; resolver 1.1.1.1 9.9.9.9 valid=300s;
resolver_timeout 5s; resolver_timeout 5s;
{% endif %} {% endif %}
@ -110,7 +110,7 @@ server {
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
ssl_trusted_certificate /etc/yunohost/certs/{{ domain }}/crt.pem; ssl_trusted_certificate /etc/yunohost/certs/{{ domain }}/crt.pem;
resolver 8.8.8.8 valid=300s; resolver 1.1.1.1 9.9.9.9 valid=300s;
resolver_timeout 5s; resolver_timeout 5s;
{% endif %} {% endif %}