nginx-0.8.17

[Igor Sysoev]

On Sat, Oct 03, 2009 at 04:02:58AM +0200, Hoang Hoang wrote:

> Igor Sysoev wrote:
> > Changes with nginx 0.8.17                                        28 Sep 
> > 2009
> > 
> >     *) Security: now "/../" are disabled in "Destination" request header
> >        line.
> > 
> >     *) Change: now $host variable value is always low case.
> > 
> >     *) Feature: the $ssl_session_id variable.
> > 
> >     *) Bugfix: socket leak; the bug had appeared in 0.8.11.
> 
> Hi Igor,
> 
> Could you explain how $ssl_session_id variable works?

This variable is the same as Apache's SSL_SESSION_ID:

http://www.modssl.org/docs/2.8/ssl_reference.html#ToC25

SSL_SESSION_ID 	string 	The hex-encoded SSL session id

More information about SSL sessions:
http://www.modssl.org/docs/2.8/ssl_intro.html#ToC12


-- 
Igor Sysoev
http://sysoev.ru/en/