Option to disable ssl sessions

[philkunz]

I'm trying to run cloudron behind a SNI proxy. Sni fails though upon ssl session resumption, because cloudron's nginx uses ssl sessions by default, which do not work reliably over SNI proxies.

SNI proxy means: The proxy routes based on domain to the target, but without tls termination.

[philkunz]

No SSL Session requires a complete ssl handshake, whenever a new connection is established. Otherwise Chrome will skip the ssl handshake and omit SNI in ClientHello, only providing the session ticket ID, which the proxy has no way of knowing it.