Yup.
This is easy.
I use Nginx so I'll go with that one. Apache tutorial will come later.
Now what is OCSP stapling?
No need for long words. Go 2 wikipedia.
http://en.wikipedia.org/wiki/OCSP_stapling
Yeah it speed up the website. up to 30% increase in speed.
Now the problem is how to do it.
Here, I'm posting on the pretense that you already have SSL installed and operational on your Nginx Vhost Configuration.
Now go over to your vhost configuration.
it will be under /etc/nginx/sites-available/yourwebsite
Go directly under
Code: Select all
ssl_ciphers
Code: Select all
i
Insert this
Code: Select all
ssl_stapling on;
resolver 8.8.8.8;
Code: Select all
resolver 8.8.8.8;
You can use openDNS too.
http://www.opendns.com/home-internet-se ... emium-dns/
Now restart Nginx.
Code: Select all
sudo service nginx restart
Enter it.
DONE!
Enjoy happy surfing with SSL OCSP stapling.
Cloudflare uses it too. But not everyone has enough to afford $20/mo(Gasp!).