nixos/h2o: disable OCSP stapling in tests

The ACME certs are faked for testing & no need to contact a certificate
authority.

Author: toastal

nixos/tests/web-servers/h2o/basic.nix

@@ -68,6 +68,8 @@ in
                 ];
                 extraSettings = {
                   minimum-version = "TLSv1.3";
+                  # when using common ACME certs, disable talking to CA
+                  ocsp-update-interval = 0;
                 };
               };
               settings = {

nixos/tests/web-servers/h2o/tls-recommendations.nix

@@ -39,6 +39,10 @@ let
                   certificate-file = ../../common/acme/server/acme.test.cert.pem;
                 }
               ];
+              extraSettings = {
+                # when using common ACME certs, disable talking to CA
+                ocsp-update-interval = 0;
+              };
             };
             settings = {
               paths."/"."file.file" = "${hello_txt recommendations}";