Thank you for the analysis and suggestions, I'll take a look at mod_ssl and will try to come up with a more appropriate patch. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,228761,228925#msg-228925