Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 1239:35cf5dca5fa4

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: added the ssl_password_file directive.
author Yaroslav Zhuravlev <yar@nginx.com>
date Fri, 27 Jun 2014 18:25:28 +0400
parents db4b017b5796
children 8fe28c6edaa1
comparison
equal deleted inserted replaced
1238:763db729e6a4 1239:35cf5dca5fa4
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="15"> 13 rev="16">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
276 <appeared-in>1.1.0</appeared-in> 276 <appeared-in>1.1.0</appeared-in>
277 <appeared-in>1.0.6</appeared-in> 277 <appeared-in>1.0.6</appeared-in>
278 278
279 <para> 279 <para>
280 Specifies a <value>curve</value> for ECDHE ciphers. 280 Specifies a <value>curve</value> for ECDHE ciphers.
281 </para>
282
283 </directive>
284
285
286 <directive name="ssl_password_file">
287 <syntax><value>file</value></syntax>
288 <default/>
289 <context>http</context>
290 <context>server</context>
291 <appeared-in>1.7.3</appeared-in>
292
293 <para>
294 Specifies a <value>file</value> with passphrases for
295 <link id="ssl_certificate_key">secret keys</link>
296 where each passphrase is specified on a separate line.
297 Passphrases are tried in turn when loading the key.
298 </para>
299
300 <para>
301 Example:
302 <example>
303 http {
304 ssl_password_file /etc/keys/global.pass;
305 ...
306
307 server {
308 server_name www1.example.com;
309 ssl_certificate_key /etc/keys/first.key;
310 }
311
312 server {
313 server_name www2.example.com;
314
315 # named pipe can also be used instead of a file
316 ssl_password_file /etc/keys/fifo;
317 ssl_certificate_key /etc/keys/second.key;
318 }
319 }
320 </example>
281 </para> 321 </para>
282 322
283 </directive> 323 </directive>
284 324
285 325