ssl_reject_handshake is working as intended

1 files changed, 2 insertions, 1 deletions

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 65e874f6..890dff3a 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -149,8 +149,9 @@ http {
         listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
 
-        # work around unreliable ssl_reject_handshake
         keepalive_timeout 0;
+
+        # https://trac.nginx.org/nginx/ticket/2012
         location / {
             return 404;
         }