summaryrefslogtreecommitdiffstats
path: root/src/etc
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2016-01-06 18:05:49 -0600
committerChris Buechler <cmb@pfsense.org>2016-01-06 18:05:49 -0600
commitc2aa7860a98875cb9990a364f534c9a521fc0abe (patch)
treec36b6ce3d56f01f25779fc73b2d72cfde2d1f348 /src/etc
parente418b7b672eab9d44651a70fc87f3df2c2b7b179 (diff)
parent657cb0dbf682834c1237d914234dc7eb45e2db3c (diff)
downloadpfsense-c2aa7860a98875cb9990a364f534c9a521fc0abe.zip
pfsense-c2aa7860a98875cb9990a364f534c9a521fc0abe.tar.gz
Merge pull request #2355 from jlduran/no-preload-in-hsts
Diffstat (limited to 'src/etc')
-rw-r--r--src/etc/inc/system.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc
index cc3d184..9d02a1e 100644
--- a/src/etc/inc/system.inc
+++ b/src/etc/inc/system.inc
@@ -1282,7 +1282,7 @@ EOD;
$nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n";
$nginx_config .= "\t\tssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n";
$nginx_config .= "\t\tssl_prefer_server_ciphers on;\n";
- $nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000; preload\";\n";
+ $nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000\";\n";
$nginx_config .= "\t\tadd_header X-Content-Type-Options nosniff;\n";
$nginx_config .= "\t\tssl_session_tickets off;\n";
$nginx_config .= "\t\tssl_stapling on;\n";
OpenPOWER on IntegriCloud