diff options
| -rw-r--r-- | ssl-config-generator/index.html | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/ssl-config-generator/index.html b/ssl-config-generator/index.html index 924e05e..2502cb7 100644 --- a/ssl-config-generator/index.html +++ b/ssl-config-generator/index.html @@ -54,7 +54,7 @@ server { ssl_certificate_key /path/to/private_key; ssl_session_timeout 1d; ssl_session_cache shared:SSL:50m; - ssl_session_tickets off; +{{sslSessionTickets}} {{dhparam}} # {{securityProfile}} configuration. tweak to your needs. @@ -339,6 +339,9 @@ $SERVER["socket"] == ":443" { data.listen = ' listen 443;' + '\n' + ' ssl on;'; } + if (isOpenSSLSemVer(data.opensslVersion, ">=0.9.8f") && isSemVer(data.serverVersion, '>=1.5.9')) { + data.sslSessionTickets = ' ssl_session_tickets off;' + } break; case "apache": // http://httpd.apache.org/docs/current/mod/mod_ssl.html |