EricH

EricH

Live

SSLLabs is giving a warning about Session resumption (caching) for the default Nginx configuration for a new site.

To enable this it is required to add (as described in the Nginx docs):

ssl_session_cache   shared:SSL:10m;
ssl_session_timeout 10m;

To the main Nginx server config. I added this as a seperate conf file (/etc/nginx/conf.d/session_cache.conf) and restarted Nginx. Now this is enabled for all sites and SSLLabs gives a pass on this warning.

Somemething to add by default for new configurations?

Nginx SSL Session Cache

2 total votes
Alex EricH
  • Dennis moved item to board Live

    2 days ago
  • Dennis moved item to board In progress

    2 days ago
  • Dennis moved item to board Planned

    3 days ago
  • EricH moved item to project Server Level Requests

    1 week ago
  • EricH created the item

    1 week ago