From 8cbe90d5ba9ca307e1eef465befcd427a7a72e05 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: May 18 2025 17:30:56 +0000
Subject: dehydrated: disable OCSP


Let's Encrypt no longger offers the service.

https://letsencrypt.org/2024/12/05/ending-ocsp/

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

---

diff --git a/pillar/role/dehydrated/central.sls b/pillar/role/dehydrated/central.sls
index 3871db3..c1a9287 100644
--- a/pillar/role/dehydrated/central.sls
+++ b/pillar/role/dehydrated/central.sls
@@ -62,7 +62,6 @@ profile:
           ca: https://acme.infra.opensuse.org/acme/acme/directory
           {%- else %}
           ca: {{ instance }}
-          ocsp_fetch: yes
           {%- endif %}
           {%- if instance == 'letsencrypt-test' %}
           renew_days: 45