Welcome! Log In Create A New Profile

Advanced

Re: Set ssl_session_tickets each virtual host is unable?

Maxim Dounin
January 12, 2017 02:22PM
Hello!

On Thu, Jan 12, 2017 at 11:57:58AM -0500, malloc813 wrote:

> Hi, I tested nginx configuration and got one problem.
> For example, I made 2 virtual hosts. They are SSL enabled server.
>
> http
> {
> #host1
> server
> {
> ...
> ssl_sesstion_tickets off;
> ...
> }
>
> #host2
> {
> ...
> ssl_session_tickets on;
> ...
> }
>
> }
>
> Visit host1 after apply this configuration, chrome shows an error
> ERR_SSL_PROTOCOL_ERROR

Works fine here. The ERR_SSL_PROTOCOL_ERROR is likely caused by
other problems in the configuration. First of all try "nginx -t"
to see if there are obvious errors in your config.

> Is it impossible to set ssl_session_tickets differently each virtual host?

No.

Session resumption happens in the context of the default server,
and it is not possible to have different session cache / session
tickets settings in virtual hosts. In the above configuration
session tickets will be off for both servers (assuming they are
listening on the same ip/port and the first one is the default).

--
Maxim Dounin
http://nginx.org/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Set ssl_session_tickets each virtual host is unable?

malloc813 January 12, 2017 11:57AM

Re: Set ssl_session_tickets each virtual host is unable?

Maxim Dounin January 12, 2017 02:22PM

Re: Set ssl_session_tickets each virtual host is unable?

malloc813 January 12, 2017 07:30PM

Re: Set ssl_session_tickets each virtual host is unable?

Maxim Dounin January 13, 2017 10:10AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 110
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready