mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

10m ssl_session_cache is adequate for our use cases.

Browse Source
This commit is contained in:
Chris Buechler 2016-01-07 15:12:38 -06:00
parent 6cf87aec74
commit 66a962cbdf
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/etc/inc/system.inc
View File

@ -1279,7 +1279,7 @@ EOD;
$nginx_config .= "\t\tssl_certificate_key {$g['varetc_path']}/{$key_location};\n";
$nginx_config .= "\t\tssl_session_timeout 10m;\n";
$nginx_config .= "\t\tkeepalive_timeout 70;\n";
$nginx_config .= "\t\tssl_session_cache shared:SSL:100m;\n";
$nginx_config .= "\t\tssl_session_cache shared:SSL:10m;\n";
$nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n";
$nginx_config .= "\t\tssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n";
$nginx_config .= "\t\tssl_prefer_server_ciphers on;\n";