EricH
SSLLabs is giving a warning about Session resumption (caching) for the default Nginx configuration for a new site.
To enable this it is required to add (as described in the Nginx docs):
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
To the main Nginx server config. I added this as a seperate conf file (/etc/nginx/conf.d/session_cache.conf) and restarted Nginx. Now this is enabled for all sites and SSLLabs gives a pass on this warning.
Somemething to add by default for new configurations?
Nginx SSL Session Cache
-
Dennis moved item to board Live
2 days ago -
Dennis moved item to board In progress
2 days ago -
Dennis moved item to board Planned
3 days ago -
EricH moved item to project Server Level Requests
1 week ago -
EricH created the item
1 week ago