From: Horsemans <horsemans@horsemans.online>
Date: Sun, 31 Mar 2019 16:58:28 +0000 (+0000)
Subject: ssl_trusted_certificate should point to chain.pem if we're demonstrating LetsEncrypt... 
X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=10a96825960fc2d5465e9b4992c33941c8bd0c64;p=akkoma

ssl_trusted_certificate should point to chain.pem if we're demonstrating LetsEncrypt: https://community.letsencrypt.org/t/howto-ocsp-stapling-for-nginx/13611/5
---

diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx
index a24bb0e61..a0e91f464 100644
--- a/installation/pleroma.nginx
+++ b/installation/pleroma.nginx
@@ -31,7 +31,7 @@ server {
     listen 443 ssl http2;
     ssl_session_timeout 5m;
 
-    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/fullchain.pem;
+    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/chain.pem;
     ssl_certificate           /etc/letsencrypt/live/example.tld/fullchain.pem;
     ssl_certificate_key       /etc/letsencrypt/live/example.tld/privkey.pem;