[PATCH] Proxy: add "proxy_ssl_padding" directive

Piotr Sikora piotr at cloudflare.com
Fri Jul 25 20:44:49 UTC 2014


Hey Maxim,

> This means that SNI can't be used with such backends (it never
> worked before as it can't work without TLS padding extension), and
> trivial solution is to don't switch it on.

I don't think that's valid solution, SNI should be used whenever possible.

Also, I think that "on/off" switch is much nicer workaround for the
problem than requiring users to play around with SSL protocols and/or
cipher suites.

Best regards,
Piotr Sikora



More information about the nginx-devel mailing list