diff options
| author | Chris Buechler <cmb@pfsense.org> | 2016-01-06 18:05:49 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2016-01-06 18:05:49 -0600 |
| commit | c2aa7860a98875cb9990a364f534c9a521fc0abe (patch) | |
| tree | c36b6ce3d56f01f25779fc73b2d72cfde2d1f348 /src/etc/inc/system.inc | |
| parent | e418b7b672eab9d44651a70fc87f3df2c2b7b179 (diff) | |
| parent | 657cb0dbf682834c1237d914234dc7eb45e2db3c (diff) | |
| download | pfsense-c2aa7860a98875cb9990a364f534c9a521fc0abe.zip pfsense-c2aa7860a98875cb9990a364f534c9a521fc0abe.tar.gz | |
Merge pull request #2355 from jlduran/no-preload-in-hsts
Diffstat (limited to 'src/etc/inc/system.inc')
| -rw-r--r-- | src/etc/inc/system.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc index cc3d184..9d02a1e 100644 --- a/src/etc/inc/system.inc +++ b/src/etc/inc/system.inc @@ -1282,7 +1282,7 @@ EOD; $nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n"; $nginx_config .= "\t\tssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n"; $nginx_config .= "\t\tssl_prefer_server_ciphers on;\n"; - $nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000; preload\";\n"; + $nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000\";\n"; $nginx_config .= "\t\tadd_header X-Content-Type-Options nosniff;\n"; $nginx_config .= "\t\tssl_session_tickets off;\n"; $nginx_config .= "\t\tssl_stapling on;\n"; |
