From 1a1a5bcc5ef14bb91be116dd9fe98f9365b3b0ae Mon Sep 17 00:00:00 2001
From: Marc Beninca <marc-beninca@rwx.work>
Date: Wed, 14 Aug 2019 15:33:09 +0200
Subject: [PATCH] openssl/must-staple

---
 in/public/security/openssl/index.rst | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/in/public/security/openssl/index.rst b/in/public/security/openssl/index.rst
index 64774d1..7f439c2 100644
--- a/in/public/security/openssl/index.rst
+++ b/in/public/security/openssl/index.rst
@@ -119,9 +119,14 @@ Generate a certificate request
   -utf8 \
   -key "private_key.pem" \
   -out "certificate_request.csr" \
-  -addext "tlsfeature=status_request" \
   -addext "subjectAltName=DNS:*.domain.tld,DNS:*.sub.domain.tld"
 
+.. warning:: must staple, problems with nginx and apache
+
+.. code:: shell
+
+ -addext "tlsfeature=status_request"
+
 Human readable:
 
 .. code:: shell