allow to enable OCSP stapling

processone · Oct 5, 2023 · f65b634 · f65b634
1 parent 3752b88
commit f65b634
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/overlay/container/acmesh/usr/local/bin/generate-certs.sh b/overlay/container/acmesh/usr/local/bin/generate-certs.sh
@@ -32,6 +32,10 @@ create_tls_certs()
         else acme_sh=""$acme_sh" --issue --"$challenge""
         fi
 
+        if [ "${ACME_OCSP_MUST_STAPLE:-false}" = 'true' ]
+        then acme_sh="$acme_sh --ocsp"
+        fi
+
         echo ">> Create certificates for domain(s) $domain ..."
         $acme_sh \
                 --keylength "$key_size" \