{"push_id":699952399,"size":1,"distinct_size":1,"ref":"refs/heads/feature/ocspStapling","head":"3f95eccd2a4bd039705f3f754423e6d3ad271159","before":"73df832d319329982207a759827ca427729d1dc9","commits":[{"sha":"3f95eccd2a4bd039705f3f754423e6d3ad271159","author":{"email":"389e06d599525a9b2f0efdcb061589528d85c81b@wenzowski.com","name":"Alec Wenzowski"},"message":"feat(router): enable OCSP stapling by default\n\nThis allows nginx to cache the [OCSP] response from the Certificate Authority\nand return a signed copy of it to the User Agent. This reduces the\nnumber of roundtrips necessary to verify the certificate and therefore\nresults in both a performance improvement and reduced load on the OCSP\nserver.\n\nIf an invalid response is stapled and sent to the client it is ignored\nso disabling verification by default does no harm.\n\nThis currently requires `/deis/router/ocsp/responder` to be manually set to the\nIP Address of the certificate's OCSP server. This will not be necessary if\na dns resolver is configured so nginx can look up the domain name specified\nby the certificate.\n\n[OCSP]: https://tools.ietf.org/html/rfc2560","distinct":true,"url":"https://api.github.com/repos/dialoghq/deis/commits/3f95eccd2a4bd039705f3f754423e6d3ad271159"}]}