Use ssl_reject_handshake to reject requests to default https site

Instead of creating a dummy certificate, we can return an SSL protocol error, which will generate a descriptive error message in the browser.
This commit is contained in:
Blaž Zupan
2023-02-02 19:19:37 -08:00
parent fd30cfe98b
commit a7f0c3b730
2 changed files with 1 additions and 18 deletions

View File

@ -32,9 +32,7 @@ server {
server_name localhost;
access_log /data/logs/fallback_access.log standard;
error_log /dev/null crit;
ssl_certificate /data/nginx/dummycert.pem;
ssl_certificate_key /data/nginx/dummykey.pem;
include conf.d/include/ssl-ciphers.conf;
ssl_reject_handshake on;
return 444;
}