11 lines
484 B
Django/Jinja
11 lines
484 B
Django/Jinja
{% if nginx.serverpki %}
|
|
# certs sent to the client in SERVER HELLO are concatenated in ssl_certificate
|
|
ssl_certificate /etc/ssl/{{ inventory_hostname }}.crt;
|
|
ssl_certificate_key /etc/ssl/private/{{ inventory_hostname }}.key;
|
|
{% endif %}
|
|
|
|
# verify chain of trust of OCSP response using Root CA and Intermediate certs
|
|
ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
|
|
|
|
# Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits
|
|
ssl_dhparam /etc/ssl/dhparams.pem;
|