Welcome! Log In Create A New Profile

Advanced

TLS/SSL Cache Automatic Purge

Arnaud Van der Vorst
April 11, 2016 04:42AM
Hi,



My name is Arnaud and I am new to the list.



I would like to know if NGINX is using any automatic purge mechanism for its
TLS/SSL Cache configured using the following directives:

ssl_session_timeout 10m;

ssl_session_cache shared:SSL:10m;



I understand that a daily purge of TLS/SSL Cache is highly recommended to
avoid breaking Perfect Forward Secrecy of the TLS Protocol.

If it does NOT use automatic purge, how can I purge the Shared cache used by
NGINX then?

Are there any command line tools for that purpose?



Thank you very much in advance for your answer and have a nice day!



Kind regards,



Arnaud

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

TLS/SSL Cache Automatic Purge

Arnaud Van der Vorst April 11, 2016 04:42AM

Re: TLS/SSL Cache Automatic Purge

B.R. April 11, 2016 07:26AM

RE: TLS/SSL Cache Automatic Purge

Arnaud Van der Vorst April 11, 2016 08:24AM

Re: TLS/SSL Cache Automatic Purge

Maxim Dounin April 11, 2016 09:32AM

opinions about Session tickets

A. Schulze April 11, 2016 11:18AM

RE: opinions about Session tickets

Arnaud Van der Vorst April 12, 2016 02:34AM

AW: RE: opinions about Session tickets

Lukas Tribus March 28, 2017 07:54PM

RE: opinions about Session tickets

Lukas Tribus April 12, 2016 05:18AM

Re: RE: opinions about Session tickets

alweiss March 28, 2017 04:42PM

Re: TLS/SSL Cache Automatic Purge

B.R. April 11, 2016 04:18PM

RE: TLS/SSL Cache Automatic Purge

Arnaud Van der Vorst April 12, 2016 02:32AM

RE: TLS/SSL Cache Automatic Purge

Lukas Tribus April 12, 2016 05:24AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 173
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready