main
mod_gnutls/0.12.0
|
Last change
on this file since b6ce8ad was
8d0efdc,
checked in by Fiona Klute <fiona.klute@…>, 3 years ago
|
|
Disable session tickets by default
After learning that the GnuTLS key "rotation" scheme never actually
changes the primary key I'm disabling session tickets by default,
because I cannot ensure everyone will reload their servers to replace
the keys. I hope to eventually implement a real key rotation and
enable tickets by default again.
|
-
Property mode set to
100644
|
|
File size:
360 bytes
|
| Line | |
|---|
| 1 | Include ${PWD}/proxy_backend.conf |
|---|
| 2 | GnuTLSSessionTickets on |
|---|
| 3 | |
|---|
| 4 | <VirtualHost _default_:${BACKEND_PORT}> |
|---|
| 5 | ServerName ${BACKEND_HOST} |
|---|
| 6 | # force an new (resumed if possible) session for each request |
|---|
| 7 | KeepAlive Off |
|---|
| 8 | GnuTLSEnable On |
|---|
| 9 | GnuTLSCertificateFile authority/server/x509.pem |
|---|
| 10 | GnuTLSKeyFile authority/server/secret.key |
|---|
| 11 | </VirtualHost> |
|---|
Note: See
TracBrowser
for help on using the repository browser.
