From 7295a765ee3b0c588112b44762c0d2d157df00d0 Mon Sep 17 00:00:00 2001 From: AD7six Date: Mon, 28 Jul 2014 14:38:22 +0000 Subject: [PATCH] add stubs for ssl-stapling and spdy --- h5bp/directive-only/spdy.conf | 7 +++++++ h5bp/directive-only/ssl-stapling.conf | 5 +++++ 2 files changed, 12 insertions(+) create mode 100644 h5bp/directive-only/spdy.conf create mode 100644 h5bp/directive-only/ssl-stapling.conf diff --git a/h5bp/directive-only/spdy.conf b/h5bp/directive-only/spdy.conf new file mode 100644 index 0000000..b98e243 --- /dev/null +++ b/h5bp/directive-only/spdy.conf @@ -0,0 +1,7 @@ +# Nginx's spdy module is currently experimental + +# Adjust connection keepalive for SPDY clients: +spdy_keepalive_timeout 300; # up from 180 secs default + +# enable SPDY header compression +spdy_headers_comp 6; diff --git a/h5bp/directive-only/ssl-stapling.conf b/h5bp/directive-only/ssl-stapling.conf new file mode 100644 index 0000000..97d044f --- /dev/null +++ b/h5bp/directive-only/ssl-stapling.conf @@ -0,0 +1,5 @@ +# OCSP stapling... +ssl_stapling on; +ssl_stapling_verify on; +#ssl_trusted_certificate /path/to/ca.crt; +resolver 8.8.8.8;