mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
374 stars 60 forks source link

Allow nginx ≥1.23.2 `ssl_session_tickets` #252

Closed janbrasna closed 1 month ago

janbrasna commented 1 month ago

Disabled in https://github.com/mozilla/server-side-tls/pull/80 (as explained in archive and in detail https://github.com/mozilla/server-side-tls/issues/135), this can now be left out for nginx:

"TLS session tickets encryption keys are now automatically rotated when using shared memory in the ssl_session_cache directive."

https://trac.nginx.org/nginx/milestone/nginx-1.23.2 (https://nginx.org/en/CHANGES-1.24)

Fixes https://github.com/mozilla/server-side-tls/issues/284, https://github.com/mozilla/server-side-tls/issues/282, and tangentially resolves #69 (Also fixes #239 along the way by updating the versions used…)