Mercurial > hg > nginx-site
annotate xml/ru/docs/mail/ngx_mail_ssl_module.xml @ 675:08140f6b7964
Documented gunzip module and corresponding changes.
author | Vladimir Homutov <vl@nginx.com> |
---|---|
date | Wed, 12 Sep 2012 09:35:47 +0000 |
parents | febc8a4ad739 |
children | 9c1ffd02f1b7 |
rev | line source |
---|---|
630
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
1 <?xml version="1.0"?> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
2 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
3 <!-- |
638 | 4 Copyright (C) 2006, 2007 Anton Yuzhaninov |
630
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
5 Copyright (C) Nginx, Inc. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
6 --> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
7 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
9 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
10 <module name="Модуль ngx_mail_ssl_module" |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
11 link="/ru/docs/mail/ngx_mail_ssl_module.html" |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
12 lang="ru" |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
13 rev="1"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
14 |
640
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
15 <section id="summary"> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
16 |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
17 <para> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
18 Модуль <literal>ngx_mail_ssl_module</literal> обеспечивает работу |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
19 почтового прокси-сервера по протоколу SSL/TLS. |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
20 </para> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
21 |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
22 <para> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
23 По умолчанию этот модуль не собирается, его сборку необходимо |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
24 разрешить с помощью конфигурационного параметра |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
25 <literal>--with-mail_ssl_module</literal>. |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
26 <note> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
27 Для сборки и работы этого модуля нужна библиотека |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
28 <link url="http://www.openssl.org">OpenSSL</link>. |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
29 </note> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
30 </para> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
31 |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
32 </section> |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
33 |
febc8a4ad739
Added the "summary" section to ngx_mail_ssl_module.
Ruslan Ermilov <ru@nginx.com>
parents:
638
diff
changeset
|
34 |
630
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
35 <section id="directives" name="Директивы"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
36 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
37 <directive name="ssl"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
38 <syntax><literal>on</literal> | <literal>off</literal></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
39 <default>off</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
40 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
41 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
42 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
43 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
44 Включает протокол SSL/TLS для данного виртуального сервера. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
45 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
46 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
47 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
48 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
49 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
50 <directive name="ssl_certificate"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
51 <syntax><value>файл</value></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
52 <default/> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
53 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
54 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
55 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
56 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
57 Указывает файл с сертификатом в формате PEM |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
58 для данного виртуального сервера. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
59 Если вместе с основным сертификатом нужно указать промежуточные, |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
60 то они должны находиться в этом же файле в следующем порядке — сначала |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
61 основной сертификат, а затем промежуточные. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
62 В этом же файле может находиться секретный ключ в формате PEM. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
63 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
64 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
65 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
66 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
67 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
68 <directive name="ssl_certificate_key"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
69 <syntax><value>файл</value></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
70 <default/> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
71 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
72 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
73 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
74 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
75 Указывает файл с секретным ключом в формате PEM |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
76 для данного виртуального сервера. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
77 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
78 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
79 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
80 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
81 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
82 <directive name="ssl_prefer_server_ciphers"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
83 <syntax><literal>on</literal> | <literal>off</literal></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
84 <default>off</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
85 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
86 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
87 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
88 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
89 Указывает, чтобы при использовании протоколов SSLv3 и TLS |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
90 серверные шифры были более приоритетны, чем клиентские. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
91 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
92 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
93 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
94 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
95 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
96 <directive name="ssl_protocols"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
97 <syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
98 [<literal>SSLv2</literal>] |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
99 [<literal>SSLv3</literal>] |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
100 [<literal>TLSv1</literal>] |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
101 [<literal>TLSv1.1</literal>] |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
102 [<literal>TLSv1.2</literal>]</syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
103 <default>SSLv3 TLSv1 TLSv1.1 TLSv1.2</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
104 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
105 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
106 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
107 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
108 Разрешает указанные протоколы. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
109 Параметры <literal>TLSv1.1</literal> и <literal>TLSv1.2</literal> работают |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
110 только при использовании библиотеки OpenSSL версии 1.0.1 и выше. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
111 <note> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
112 Параметры <literal>TLSv1.1</literal> и <literal>TLSv1.2</literal> поддерживаются |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
113 только начиная с версий 1.1.13 и 1.0.12, |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
114 поэтому при использовании OpenSSL версии 1.0.1 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
115 и выше на старых версиях nginx эти протоколы работать будут, однако их нельзя |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
116 будет отключить. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
117 </note> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
118 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
119 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
120 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
121 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
122 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
123 <directive name="ssl_session_cache"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
124 <syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
125 <literal>off</literal> | |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
126 <literal>none</literal> | |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
127 [<literal>builtin</literal>[:<value>размер</value>]] |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
128 [<literal>shared</literal>:<value>название</value>:<value>размер</value>]</syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
129 <default>none</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
130 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
131 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
132 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
133 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
134 Задаёт тип и размеры кэшей для хранения параметров сессий. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
135 Тип кэша может быть следующим: |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
136 <list type="tag" compact="no"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
137 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
138 <tag-name><literal>off</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
139 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
140 жёсткое запрещение использования кэша сессий: |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
141 nginx явно говорит клиенту, что сессии не могут использоваться повторно. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
142 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
143 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
144 <tag-name><literal>none</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
145 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
146 мягкое запрещение использования кэша сессий: |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
147 nginx говорит клиенту, что сессии могут использоваться повторно, но |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
148 на самом деле не используются. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
149 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
150 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
151 <tag-name><literal>builtin</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
152 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
153 встроенный в OpenSSL кэш, используется в рамках только одного рабочего процесса. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
154 Размер кэша задаётся в сессиях. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
155 Если размер не задан, то он равен 20480 сессиям. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
156 Использование встроенного кэша может вести к фрагментации памяти. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
157 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
158 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
159 <tag-name><literal>shared</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
160 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
161 разделяемый между всеми рабочими процессами. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
162 Размер кэша задаётся в байтах, в 1 мегабайт может поместиться |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
163 около 4000 сессий. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
164 У каждого разделяемого кэша должно быть произвольное название. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
165 Кэш с одинаковым названием может использоваться в нескольких |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
166 виртуальных серверах. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
167 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
168 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
169 </list> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
170 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
171 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
172 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
173 Можно использовать одновременно оба типа кэша, например: |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
174 <example> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
175 ssl_session_cache builtin:1000 shared:SSL:10m; |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
176 </example> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
177 однако использование только разделяемого кэша без встроенного должно |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
178 быть более эффективным. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
179 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
180 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
181 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
182 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
183 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
184 <directive name="ssl_session_timeout"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
185 <syntax><value>время</value></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
186 <default>5m</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
187 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
188 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
189 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
190 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
191 Задаёт время, в течение которого клиент может повторно |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
192 использовать параметры сессии, хранящейся в кэше. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
193 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
194 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
195 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
196 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
197 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
198 <directive name="starttls"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
199 <syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
200 <literal>on</literal> | |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
201 <literal>off</literal> | |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
202 <literal>only</literal></syntax> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
203 <default>off</default> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
204 <context>mail</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
205 <context>server</context> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
206 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
207 <para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
208 <list type="tag"> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
209 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
210 <tag-name><literal>on</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
211 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
212 разрешить использование команд <literal>STLS</literal> для POP3 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
213 и <literal>STARTTLS</literal> для IMAP; |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
214 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
215 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
216 <tag-name><literal>off</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
217 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
218 запретить использование команд <literal>STLS</literal> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
219 и <literal>STARTTLS</literal>; |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
220 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
221 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
222 <tag-name><literal>only</literal></tag-name> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
223 <tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
224 требовать предварительного перехода на TLS. |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
225 </tag-desc> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
226 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
227 </list> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
228 </para> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
229 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
230 </directive> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
231 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
232 </section> |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
233 |
a235ce0f8eef
Initial mail proxy server documentation in Russian.
Ruslan Ermilov <ru@nginx.com>
parents:
diff
changeset
|
234 </module> |