Analyzer ngx-ssl-session-ticket-key

# Name

ngx-ssl-session-ticket-key - Nginx SSL Session Ticket Key Configuration

This analyzer examines SSL session ticket key configurations in nginx-based applications such as OpenResty and Kong. It monitors the ssl_session_ticket_key directive settings, detecting whether session ticket keys are properly configured, rotated, or using default values. The analyzer generates pie chart visualizations showing the distribution of key configuration states, helping administrators ensure secure SSL/TLS session resumption, prevent security vulnerabilities from key reuse, and optimize SSL handshake performance.

# Resource Category

Network I/O.

# Application Type & Technical Stack

• OpenResty
• Nginx
• Kong
• APISIX

# Command Line Syntax

The analyzer can be invoked directly on the command-line via the orxray utility from the openresty-xray-cli software package.

Alternatively, the analyzer can also be invoked manually or automatically on the web console UI of OpenResty XRay (like on the Advanced web page).

# PID is the target process PID.
orxray analyzer run ngx-ssl-session-ticket-key -p PID

# trace a shell command directly
orxray analyzer run ngx-ssl-session-ticket-key -c SHELL_CMD

# PGID is the process group ID or any process's PID within the target process
# group.
orxray analyzer run ngx-ssl-session-ticket-key -p -PGID

# trace any processes started from the specified executable path.
orxray analyzer run ngx-ssl-session-ticket-key --exe /path/to/exe/file

# Tracing Multiple Processes

Supported.

# Output Formats

• Bar Charts
• Plain Texts

# Output Example

[
  {
    "title": "Nginx SSL Session Ticket Key",
    "subtitle": "",
    "series": {
      "data": {
        "FBF246B80BB728C565559D1BAEEACB28": 93
      },
      "name": "Ticket Encrypt/Decrypt Count"
    },
    "ver": 1,
    "type": "bar"
  }
]

# Author

The OpenResty Inc. Team.

# Copyright

Copyright (C) by OpenResty Inc. All rights reserved.