Fix nginx.conf settings.

2018-10-13 14:46:25 +09:00
parent fd3f8b9369
commit 60e3dc12e0
1 changed files with 5 additions and 3 deletions
@@ -52,12 +52,14 @@ http {
    real_ip_header     CF-Connecting-IP;

    # SSL Config
-    strict_sni on;
-    strict_sni_header on;
+    ## Strict SNI must use fake server.
+    strict_sni off;
+    ## Strict SNI Header must use 'strict_sni'.
+    strict_sni_header off;
    ssl_dyn_rec_enable on;
    ssl_early_data on;

-    ## SSL OCSP Stapling
+    # SSL OCSP Stapling
    resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
    resolver_timeout 15s;
    ssl_stapling on;