summaryrefslogtreecommitdiffstats
path: root/roles/common-web/files/etc/nginx/snippets
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2016-03-28 00:16:10 +0300
committerGuilhem Moulin <guilhem@fripost.org>2016-03-28 00:16:10 +0300
commit20e56d8416683e25b4999a57579eb304c06be985 (patch)
tree56e5e3da9a556aa56050201b3317471c075e659e /roles/common-web/files/etc/nginx/snippets
parent4dbc2fb82f4f001c4927d200ddedae7ac1ff5f70 (diff)
Replace LE's X1 intermediate CA with X3 since the latter has better support for XP.
Diffstat (limited to 'roles/common-web/files/etc/nginx/snippets')
-rw-r--r--roles/common-web/files/etc/nginx/snippets/ssl.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/roles/common-web/files/etc/nginx/snippets/ssl.conf b/roles/common-web/files/etc/nginx/snippets/ssl.conf
index 0f989b8..1403846 100644
--- a/roles/common-web/files/etc/nginx/snippets/ssl.conf
+++ b/roles/common-web/files/etc/nginx/snippets/ssl.conf
@@ -2,7 +2,7 @@
# https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=nginx-1.6.2&openssl=1.0.1k&hsts=yes&profile=intermediate
# certs sent to the client in SERVER HELLO are concatenated in ssl_certificate
-# ~$ cat /etc/nginx/ssl/srvcert.pem /usr/share/letsencrypt-tiny/lets-encrypt-x1-cross-signed.pem | sudo tee /etc/nginx/ssl/srvcert.chained.pem
+# ~$ cat /etc/nginx/ssl/srvcert.pem /usr/share/letsencrypt-tiny/lets-encrypt-x3-cross-signed.pem | sudo tee /etc/nginx/ssl/srvcert.chained.pem
ssl on;
@@ -27,4 +27,4 @@ ssl_stapling on;
ssl_stapling_verify on;
# verify chain of trust of OCSP response using Root CA and Intermediate certs
-ssl_trusted_certificate /usr/share/letsencrypt-tiny/lets-encrypt-x1-cross-signed.pem;
+ssl_trusted_certificate /usr/share/letsencrypt-tiny/lets-encrypt-x3-cross-signed.pem;