So it looks like the ssl config is valid per-port only. If I set up a server on a different port with different ssl config, it works. Is this a bug or is it by design? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,257064,257086#msg-257086