Home / server / Questions / 406134
Accepted
Mediocre Gopher
Asked: 2012-07-10 10:12:37 +0800 CST

Nginx SSLInsecureRenegotiation equivalent

  • 772

I'm currently migrating our ssl setup from apache to nginx, but I've hit a roadblock. In our apache config we have SSLInsecureRenegotiation on due to some incompatibility issues with safari. I can't find the equivalent command in nginx. Is there one?

apache-2.2 ssl nginx

1 Answers

  1. Best Answer

    You should look into the viability of just losing that particular option. As the name suggest it's insecure!

    Nginx currently (since 0.8.23) does not do TLS renegotiation at all, anyway.

    Also, while I realize you seem to be in a position where compatibility with broken clients seems to be more important than security (unfair argument: why are you using TLS, if you're going to poke holes in it?), I suggest checking your site with Qualys SSL Labs's SSL Server Test.

    • 2