Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 1978:8f1a568a8bbf

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented "TLSv1.3" parameter of the "ssl_protocols" directive. While here, cleaned up a note about using OpenSSL on older nginx versions.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 25 Apr 2017 18:17:41 +0300
parents 66a30a380fba
children dabca59da4ce
comparison
equal deleted inserted replaced
1977:57a1ef2902bf 1978:8f1a568a8bbf
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="33"> 13 rev="34">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
396 <syntax> 396 <syntax>
397 [<literal>SSLv2</literal>] 397 [<literal>SSLv2</literal>]
398 [<literal>SSLv3</literal>] 398 [<literal>SSLv3</literal>]
399 [<literal>TLSv1</literal>] 399 [<literal>TLSv1</literal>]
400 [<literal>TLSv1.1</literal>] 400 [<literal>TLSv1.1</literal>]
401 [<literal>TLSv1.2</literal>]</syntax> 401 [<literal>TLSv1.2</literal>]
402 [<literal>TLSv1.3</literal>]</syntax>
402 <default>TLSv1 TLSv1.1 TLSv1.2</default> 403 <default>TLSv1 TLSv1.1 TLSv1.2</default>
403 <context>http</context> 404 <context>http</context>
404 <context>server</context> 405 <context>server</context>
405 406
406 <para> 407 <para>
407 Enables the specified protocols. 408 Enables the specified protocols.
408 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters work 409 <note>
409 only when the OpenSSL library of version 1.0.1 or higher is used. 410 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters
410 <note> 411 (1.1.13, 1.0.12) work only when OpenSSL 1.0.1 or higher is used.
411 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters are 412 </note>
412 supported starting from versions 1.1.13 and 1.0.12, 413 <note>
413 so when the OpenSSL version 1.0.1 or higher 414 The <literal>TLSv1.3</literal> parameter (1.13.0) works only when
414 is used on older nginx versions, these protocols work, but cannot 415 OpenSSL 1.1.1 built with TLSv1.3 support is used.
415 be disabled.
416 </note> 416 </note>
417 </para> 417 </para>
418 418
419 </directive> 419 </directive>
420 420