Mercurial > hg > nginx-site

comparison xml/en/docs/stream/ngx_stream_ssl_module.xml @ 1711:38fb3e6b71e8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented ssl_ecdh_curve changes in 1.11.0.
author Maxim Dounin <mdounin@mdounin.ru>
date Fri, 27 May 2016 19:05:15 +0300
parents 6f5497797cde
children a0bc284941f6
comparison
equal deleted inserted replaced
1710:692d34a2adfc 1711:38fb3e6b71e8
7 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 7 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
8 8
9 <module name="Module ngx_stream_ssl_module" 9 <module name="Module ngx_stream_ssl_module"
10 link="/en/docs/stream/ngx_stream_ssl_module.html" 10 link="/en/docs/stream/ngx_stream_ssl_module.html"
11 lang="en" 11 lang="en"
12 rev="6"> 12 rev="7">
13 13
14 <section id="summary"> 14 <section id="summary">
15 15
16 <para> 16 <para>
17 The <literal>ngx_stream_ssl_module</literal> module (1.9.0) 17 The <literal>ngx_stream_ssl_module</literal> module (1.9.0)
152 </directive> 152 </directive>
153 153
154 154
155 <directive name="ssl_ecdh_curve"> 155 <directive name="ssl_ecdh_curve">
156 <syntax><value>curve</value></syntax> 156 <syntax><value>curve</value></syntax>
157 <default>prime256v1</default> 157 <default>auto</default>
158 <context>stream</context> 158 <context>stream</context>
159 <context>server</context> 159 <context>server</context>
160 160
161 <para> 161 <para>
162 Specifies a <value>curve</value> for ECDHE ciphers. 162 Specifies a <value>curve</value> for ECDHE ciphers.
163 </para>
164
165 <para>
166 When using OpenSSL 1.0.2 or higher,
167 it is possible to specify multiple curves (1.11.0), for example:
168 <example>
169 ssl_ecdh_curve prime256v1:secp384r1;
170 </example>
171 </para>
172
173 <para>
174 The special value <literal>auto</literal> (1.11.0) instructs nginx to use
175 a list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,
176 or <literal>prime256v1</literal> with older versions.
177 </para>
178
179 <para>
180 <note>
181 Prior to version 1.11.0,
182 the <literal>prime256v1</literal> curve was used by default.
183 </note>
163 </para> 184 </para>
164 185
165 </directive> 186 </directive>
166 187
167 188