SSL Session Cache

[rahul286]

If there is a single HTTP site, we must add SSL cache. It was present on rtCamp old server... We missed that during migration. Added it just now!

Add... /etc/nginx/nginx.conf inside http{...} block

    ssl_session_cache   shared:SSL:10m;
    ssl_session_timeout 10m;

Also add...

ssl_ciphers RC4:HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

http://nginx.org/en/docs/http/configuring_https_servers.html

[MiteshShah]

As per our new server nginx.conf added following code in /etc/nginx/nginx.conf

# SSL Settings
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+RC4:EDH+aRSA:EECDH:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS