feat(ssl.conf): add SSLSessionTickets to ssl.conf on debian

saltstack-formulas · Oct 14, 2020 · 41a7a83 · 41a7a83
1 parent 65043f8
commit 41a7a83
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/apache/files/Debian/ssl.conf.jinja b/apache/files/Debian/ssl.conf.jinja
@@ -96,6 +96,13 @@
 	SSLStaplingReturnResponderErrors {{ salt['pillar.get']('apache:ssl:SSLStaplingReturnResponderErrors', 'Off') }}
 	SSLStaplingCache {{ salt['pillar.get']('apache:ssl:SSLStaplingCache', 'shmcb:/var/run/ocsp(128000)') }}
 	{%- endif %}
+
+	{% set ssl_session_ticket = salt['pillar.get']('apache:ssl:SSLSessionTickets') -%}
+	{% if ssl_session_ticket -%}
+	#   Enable or disable use of TLS session tickets
+	#   Default: On
+	SSLSessionTickets {{ ssl_session_ticket }}
+	{%- endif %}
 </IfModule>
 
 # vim: syntax=apache ts=4 sw=4 sts=4 sr noet