Skip to content

Commit 92d1884

Browse files
committed
doc: documented how to easily test the ssl_session_fetch_by_lua* and ssl_session_store_by_lua* locally with a modern web browser.
1 parent 7d242ff commit 92d1884

File tree

2 files changed

+28
-0
lines changed

2 files changed

+28
-0
lines changed

README.markdown

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2486,6 +2486,13 @@ SSL session resumption will happen and thus bypass the [ssl_certificate_by_lua*]
24862486
hook completely. In this case, NGINX also bypasses the [ssl_session_store_by_lua_block](#ssl_session_store_by_lua)
24872487
hook, for obvious reasons.
24882488

2489+
To easily test this hook locally with a modern web browser, you can temporarily put the following line
2490+
in your https server block to disable the TLS session ticket support:
2491+
2492+
ssl_session_tickets off;
2493+
2494+
But do not forget to comment this line out before publishing your site to the world.
2495+
24892496
If you are using the [official pre-built packages](http://openresty.org/en/linux-packages.html) for [OpenResty](https://openresty.org/)
24902497
1.11.2.1 or later, then everything should work out of the box.
24912498

@@ -2543,6 +2550,13 @@ is provided in the [ngx.ssl.session](https://github.com/openresty/lua-resty-core
25432550
Lua module shipped with the [lua-resty-core](https://github.com/openresty/lua-resty-core#readme)
25442551
library.
25452552

2553+
To easily test this hook locally with a modern web browser, you can temporarily put the following line
2554+
in your https server block to disable the TLS session ticket support:
2555+
2556+
ssl_session_tickets off;
2557+
2558+
But do not forget to comment this line out before publishing your site to the world.
2559+
25462560
This directive was first introduced in the `v0.10.6` release.
25472561

25482562
[Back to TOC](#directives)

doc/HttpLuaModule.wiki

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2093,6 +2093,13 @@ SSL session resumption will happen and thus bypass the [[#ssl_certificate_by_lua
20932093
hook completely. In this case, NGINX also bypasses the [[#ssl_session_store_by_lua*|ssl_session_store_by_lua_block]]
20942094
hook, for obvious reasons.
20952095
2096+
To easily test this hook locally with a modern web browser, you can temporarily put the following line
2097+
in your https server block to disable the TLS session ticket support:
2098+
2099+
ssl_session_tickets off;
2100+
2101+
But do not forget to comment this line out before publishing your site to the world.
2102+
20962103
If you are using the [official pre-built packages](http://openresty.org/en/linux-packages.html) for [OpenResty](https://openresty.org/)
20972104
1.11.2.1 or later, then everything should work out of the box.
20982105
@@ -2144,6 +2151,13 @@ is provided in the [ngx.ssl.session](https://github.com/openresty/lua-resty-core
21442151
Lua module shipped with the [lua-resty-core](https://github.com/openresty/lua-resty-core#readme)
21452152
library.
21462153
2154+
To easily test this hook locally with a modern web browser, you can temporarily put the following line
2155+
in your https server block to disable the TLS session ticket support:
2156+
2157+
ssl_session_tickets off;
2158+
2159+
But do not forget to comment this line out before publishing your site to the world.
2160+
21472161
This directive was first introduced in the <code>v0.10.6</code> release.
21482162
21492163
== ssl_session_store_by_lua_file ==

0 commit comments

Comments
 (0)