Add Better Error Handling for SSLSessionTicketKey

Adds more error handling when writing an SSLSessionTicketKey to
the config map. Also adds tests and makes the function for modular.

Fixes #2756
This commit is contained in:
Fernando Diaz 2018-07-15 17:24:16 -05:00
parent 6615e98186
commit 52ecdf0b46
4 changed files with 72 additions and 13 deletions

View file

@ -303,7 +303,7 @@ type Configuration struct {
// Sets the secret key used to encrypt and decrypt TLS session tickets.
// http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_tickets
// By default, a randomly generated key is used.
// Example: openssl rand 80 | base64 -w0
// Example: openssl rand 80 | openssl enc -A -base64
SSLSessionTicketKey string `json:"ssl-session-ticket-key,omitempty"`
// Time during which a client may reuse the session parameters stored in a cache.