Ssl_session_timeout = 7d

Community Support General Questions
1

Hello

In the freshly installed Hestiacp I found the following nginx settings:

#SSL PCI compliance

ssl_session_cache shared:SSL:20m;
ssl_session_tickets on;
ssl_session_timeout 7d;

Why is caching set to 7 days?
But maybe I just don’t understand the settings well?How is this related to PCI compliance?

2

Hi @pavlozt

I have no idea why those settings are like that, but for PCI compliance, I would use:

ssl_session_cache shared:SSL:20m;
ssl_session_tickets off;
ssl_session_timeout 1h;
1 Like
3

I propose to push this rather small change into the source code:

2 Likes