From 71af6c9b6b79cfe0b0a2a017e688827af47c1b68 Mon Sep 17 00:00:00 2001 From: Waldemar Quevedo Date: Tue, 22 Jun 2021 10:00:42 -0700 Subject: [PATCH] Update ocsp.md --- nats-server/configuration/ocsp.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/nats-server/configuration/ocsp.md b/nats-server/configuration/ocsp.md index 1899552..6ebe31f 100644 --- a/nats-server/configuration/ocsp.md +++ b/nats-server/configuration/ocsp.md @@ -19,7 +19,7 @@ tlsfeature = status_request The NATS server will make a request to the OCSP responder to fetch a new staple which will then be presented to any TLS connection that is accepted by the server during the TLS handshake. -OCSP Stapling can be explicitly enabled or disabled in the NATS Server by setting the following flag in the NATS configuration file: +OCSP Stapling can be explicitly enabled or disabled in the NATS Server by setting the following flag in the NATS configuration file at the top-level: ```hcl ocsp: false @@ -71,7 +71,10 @@ to allow the server to resume in case of restarts without having to make another if the staple is still valid. ```hcl +ocsp: true + store_dir: "/path/to/store/dir" + tls { cert_file: "configs/certs/ocsp/server-status-request-url.pem" key_file: "configs/certs/ocsp/server-status-request-url-key.pem"