Mercurial > hg > nginx-quic
annotate conf/fastcgi_params @ 5503:d049b0ea00a3
SSL: ssl_session_tickets directive.
This adds support so it's possible to explicitly disable SSL Session
Tickets. In order to have good Forward Secrecy support either the
session ticket key has to be reloaded by using nginx' binary upgrade
process or using an external key file and reloading the configuration.
This directive adds another possibility to have good support by
disabling session tickets altogether.
If session tickets are enabled and the process lives for a long a time,
an attacker can grab the session ticket from the process and use that to
decrypt any traffic that occured during the entire lifetime of the
process.
author | Dirkjan Bussink <d.bussink@gmail.com> |
---|---|
date | Fri, 10 Jan 2014 16:12:40 +0100 |
parents | 352a7b025f2e |
children | 62869a9b2e7d |
rev | line source |
---|---|
537 | 1 |
2 fastcgi_param QUERY_STRING $query_string; | |
3 fastcgi_param REQUEST_METHOD $request_method; | |
4 fastcgi_param CONTENT_TYPE $content_type; | |
5 fastcgi_param CONTENT_LENGTH $content_length; | |
6 | |
7 fastcgi_param SCRIPT_NAME $fastcgi_script_name; | |
8 fastcgi_param REQUEST_URI $request_uri; | |
9 fastcgi_param DOCUMENT_URI $document_uri; | |
10 fastcgi_param DOCUMENT_ROOT $document_root; | |
11 fastcgi_param SERVER_PROTOCOL $server_protocol; | |
4333
352a7b025f2e
Added HTTPS param with Apache-like behaviour to fastcgi/scgi/uwsgi_params (fixes #38).
Valentin Bartenev <vbart@nginx.com>
parents:
1330
diff
changeset
|
12 fastcgi_param HTTPS $https if_not_empty; |
537 | 13 |
14 fastcgi_param GATEWAY_INTERFACE CGI/1.1; | |
1330 | 15 fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; |
537 | 16 |
17 fastcgi_param REMOTE_ADDR $remote_addr; | |
18 fastcgi_param REMOTE_PORT $remote_port; | |
19 fastcgi_param SERVER_ADDR $server_addr; | |
20 fastcgi_param SERVER_PORT $server_port; | |
21 fastcgi_param SERVER_NAME $server_name; | |
22 | |
23 # PHP only, required if PHP was built with --enable-force-cgi-redirect | |
24 fastcgi_param REDIRECT_STATUS 200; |