search

chr4 / nginx.vim

Improved nginx vim plugin (incl. syntax highlighting)
450 stars 41 forks source link

mark ssl_session_tickets off; as insecure from nginx 1.23.2 #22

Open HLFH opened 1 year ago

HLFH commented 1 year ago

Nginx 1.23.2 appears to change how ssl_session_tickets is handled and as a result we should change to setting them as enabled.

ssl_session_tickets on;

https://nginx.org/en/CHANGES

TLS session tickets encryption keys are now automatically rotated when using shared memory in the "ssl_session_cache" directive.

See https://github.com/mozilla/server-side-tls/issues/284 for details.