diff --git a/apache/files/Debian/ssl.conf.jinja b/apache/files/Debian/ssl.conf.jinja
index e31946df596dda0e81b57b0abfff8896d870fc39..ae701d94c9a1a6a9f530bb441eb85aa8dd9e1b9e 100644
--- a/apache/files/Debian/ssl.conf.jinja
+++ b/apache/files/Debian/ssl.conf.jinja
@@ -1,3 +1,6 @@
+#
+# This file is managed by Salt! Do not edit by hand!
+#
 <IfModule mod_ssl.c>
 
 	# Pseudo Random Number Generator (PRNG):
@@ -81,6 +84,18 @@
 	#   Default: Off
 	#SSLStrictSNIVHostCheck On
 
+	{% set use_stapling = salt['pillar.get']('apache:ssl:SSLUseStapling', 'Off') %}
+	{% if use_stapling == 'On' %}
+	#   Stapling configuration
+	#   Default: Off
+	#
+	#   See https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html for more details
+	#   Defaults values taken from https://mozilla.github.io/server-side-tls/ssl-config-generator/
+	SSLUseStapling {{ use_stapling }}
+	SSLStaplingResponderTimeout {{ salt['pillar.get']('SSLStaplingResponderTimeout', '5') }}
+	SSLStaplingReturnResponderErrors {{ salt['pillar.get']('SSLStaplingReturnResponderErrors', 'Off') }}
+	SSLStaplingCache {{ salt['pillar.get']('SSLStaplingCache', 'shmcb:/var/run/ocsp(128000)') }}
+	{% endif %}
 </IfModule>
 
 # vim: syntax=apache ts=4 sw=4 sts=4 sr noet
diff --git a/pillar.example b/pillar.example
index db94b0edfce41e62beea50e8050abdc067fe6955..f3039fd07e50efef9f12ef583b13208be6a989e6 100644
--- a/pillar.example
+++ b/pillar.example
@@ -311,6 +311,10 @@ apache:
     SSLCipherSuite: 'HIGH:!aNULL'
     SSLHonorCipherOrder: 'Off'
     SSLProtocol: 'all -SSLv3'
+    SSLUseStapling: 'Off'
+    SSLStaplingResponderTimeout: '5'
+    SSLStaplingReturnResponderErrors: 'Off'
+    SSLStaplingCache: 'shmcb:/var/run/ocsp(128000)'
 
   # ``apache.mod_remoteip`` formula additional configuration:
   mod_remoteip: