Nginx SSLInsecureRenegotiation equivalent

apache-2.2nginxssl

I'm currently migrating our ssl setup from apache to nginx, but I've hit a roadblock. In our apache config we have SSLInsecureRenegotiation on due to some incompatibility issues with safari. I can't find the equivalent command in nginx. Is there one?

Best Answer

You should look into the viability of just losing that particular option. As the name suggest it's insecure!

Nginx currently (since 0.8.23) does not do TLS renegotiation at all, anyway.

Also, while I realize you seem to be in a position where compatibility with broken clients seems to be more important than security (unfair argument: why are you using TLS, if you're going to poke holes in it?), I suggest checking your site with Qualys SSL Labs's SSL Server Test.