SSL Nginx ssl optimizations

which timeout as Centmin Mod Nginx already sets the outlined ssl timeouts for ssl session resumption when nginx HTTP/2 HTTPS vhost is created

Code:

ssl_session_cache      shared:SSL:10m;
ssl_session_timeout    60m;
ssl_protocols  TLSv1 TLSv1.1 TLSv1.2; 

 

if you created HTTP/2 HTTPS vhost via centmin mod addons/acemtool.sh and letsencrypt integration, those values are set in vhost include file at /usr/local/nginx/conf/ssl_include.conf

 

It should be created for self-signed ssl cert nginx vhosts too

just tested in 123.09beta01 on centos 7 contents for self-signed cert testdomain1.com ssl vhost at /usr/local/nginx/conf/conf.d/testdomain1.com.ssl.conf

Code (Text):

# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html
# For HTTP/2 SSL Setup
# read http://centminmod.com/nginx_configure_https_ssl_spdy.html

# redirect from www to non-www  forced SSL
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
# server {
#       listen   80;
#       server_name testdomain1.com www.testdomain1.com;
#       return 302 https://$server_name$request_uri;
# }

server {
  listen 443 ssl http2;
  server_name testdomain1.com www.testdomain1.com;

  ssl_dhparam /usr/local/nginx/conf/ssl/testdomain1.com/dhparam.pem;
  ssl_certificate      /usr/local/nginx/conf/ssl/testdomain1.com/testdomain1.com.crt;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/testdomain1.com/testdomain1.com.key;
  include /usr/local/nginx/conf/ssl_include.conf;

.. snipped ..

has include file

Code (Text):

  include /usr/local/nginx/conf/ssl_include.conf;