@ -107,6 +107,19 @@ type AutomationPolicy struct {
// load.
// load.
OnDemand bool ` json:"on_demand,omitempty" `
OnDemand bool ` json:"on_demand,omitempty" `
// Disables OCSP stapling. Disabling OCSP stapling puts clients at
// greater risk, reduces their privacy, and usually lowers client
// performance. It is NOT recommended to disable this unless you
// are able to justify the costs.
// EXPERIMENTAL. Subject to change.
DisableOCSPStapling bool ` json:"disable_ocsp_stapling,omitempty" `
// Overrides the URLs of OCSP responders embedded in certificates.
// Each key is a OCSP server URL to override, and its value is the
// replacement. An empty value will disable querying of that server.
// EXPERIMENTAL. Subject to change.
OCSPOverrides map [ string ] string ` json:"ocsp_overrides,omitempty" `
// Issuers stores the decoded issuer parameters. This is only
// Issuers stores the decoded issuer parameters. This is only
// used to populate an underlying certmagic.Config's Issuers
// used to populate an underlying certmagic.Config's Issuers
// field; it is not referenced thereafter.
// field; it is not referenced thereafter.
@ -205,6 +218,10 @@ func (ap *AutomationPolicy) Provision(tlsApp *TLS) error {
RenewalWindowRatio : ap . RenewalWindowRatio ,
RenewalWindowRatio : ap . RenewalWindowRatio ,
KeySource : keySource ,
KeySource : keySource ,
OnDemand : ond ,
OnDemand : ond ,
OCSP : certmagic . OCSPConfig {
DisableStapling : ap . DisableOCSPStapling ,
ResponderOverrides : ap . OCSPOverrides ,
} ,
Storage : storage ,
Storage : storage ,
Issuers : issuers ,
Issuers : issuers ,
Logger : tlsApp . logger ,
Logger : tlsApp . logger ,