mod_tls_memcache
The mod_tls_memcache submodule is contained in the mod_tls_memcache.c file, and is not compiled by default. Installation instructions are discussed here.
mod_tls_memcache.c
This submodule a memcached-based implementation of an external SSL session cache for use by the mod_tls module's TLSSessionCache directive. The module also implements a memcached-based implementation of an external OCSP response cache for the TLSStaplingCache directive.
mod_tls
TLSSessionCache
TLSStaplingCache
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
Please contact TJ Saunders <tj at castaglia.org> with any questions, concerns, or suggestions regarding this module.
The mod_tls_memcache module supports the "memcache" string for the type parameter of the TLSSessionCache configuration directive. The info parameter for mod_tls_memcache can be empty/blank, indicating a native binary encoding of the cached data), or it can be "/json", indicating that the cached data will be encoded using JSON. This means the TLSSessionCache setting will look like:
# Use binary encoding for cached data TLSSessionCache memcache:
# Use JSON encoding for cached data TLSSessionCache memcache:/json
The mod_tls_memcache module also supports the "memcache" string for the type parameter of the TLStaplingCache configuration directive, e.g.:
TLStaplingCache
TLSStaplingCache memcache:
Examples
<IfModule mod_memcache.c> MemcacheEngine on MemcacheServers memcache-servers </IfModule> <IfModule mod_tls.c> ... <IfModule mod_tls_memcache.c> # Store the data formatted as JSON TLSSessionCache memcache:/json TLSStaplingCache memcache: </IfModule> </IfModule>
Logging The mod_tls_memcache module supports trace logging, via the module-specific log channels:
proftpd.conf
TraceLog /path/to/ftpd/trace.log Trace tls.memcache:20
$ ./configure --enable-memcache --with-modules=mod_tls:mod_tls_memcache $ make $ make install
Alternatively, if your proftpd was compiled with DSO support, you can use the prxs tool to build mod_tls_memcache as a shared module:
proftpd
prxs
$ prxs -c -i -d mod_tls_memcache.c