Skip to content

Instantly share code, notes, and snippets.

@danpalmer
Last active August 29, 2015 14:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save danpalmer/0151c008b14162e7b091 to your computer and use it in GitHub Desktop.
Save danpalmer/0151c008b14162e7b091 to your computer and use it in GitHub Desktop.
diff --git a/nginx_ssl.conf b/nginx_ssl.conf
index 487cc14..7701f2e 100644
--- a/nginx_ssl.conf
+++ b/nginx_ssl.conf
@@ -23,7 +23,7 @@ server {
+ ssl_stapling on;
+ ssl_stapling_verify on;
+ ssl_trusted_certificate /etc/ssl/certs/ca-certs.pem;
+ resolver 8.8.8.8 8.8.4.4 [2001:4860:4860::8888] [2001:4860:4860::8844];
@mvdwalle
Copy link

Hey! Where did you get the ca-certs.pem file from? It is not available on my server and laptop. Ow and btw, awesome work on your article, it helped boost my SSL Labs score a bit more (already A+, but the seperate scores could use improvements).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment