comparison xml/en/docs/mail/ngx_mail_ssl_module.xml @ 1978:8f1a568a8bbf

Documented "TLSv1.3" parameter of the "ssl_protocols" directive. While here, cleaned up a note about using OpenSSL on older nginx versions.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 25 Apr 2017 18:17:41 +0300
parents 237a10fb98d2
children 3d9e7993c201
comparison
equal deleted inserted replaced
1977:57a1ef2902bf 1978:8f1a568a8bbf
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_mail_ssl_module" 10 <module name="Module ngx_mail_ssl_module"
11 link="/en/docs/mail/ngx_mail_ssl_module.html" 11 link="/en/docs/mail/ngx_mail_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="15"> 13 rev="16">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary 18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary
336 <syntax> 336 <syntax>
337 [<literal>SSLv2</literal>] 337 [<literal>SSLv2</literal>]
338 [<literal>SSLv3</literal>] 338 [<literal>SSLv3</literal>]
339 [<literal>TLSv1</literal>] 339 [<literal>TLSv1</literal>]
340 [<literal>TLSv1.1</literal>] 340 [<literal>TLSv1.1</literal>]
341 [<literal>TLSv1.2</literal>]</syntax> 341 [<literal>TLSv1.2</literal>]
342 [<literal>TLSv1.3</literal>]</syntax>
342 <default>TLSv1 TLSv1.1 TLSv1.2</default> 343 <default>TLSv1 TLSv1.1 TLSv1.2</default>
343 <context>mail</context> 344 <context>mail</context>
344 <context>server</context> 345 <context>server</context>
345 346
346 <para> 347 <para>
347 Enables the specified protocols. 348 Enables the specified protocols.
348 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters work
349 only when the OpenSSL library of version 1.0.1 or higher is used.
350 <note> 349 <note>
351 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters are 350 The <literal>TLSv1.1</literal> and <literal>TLSv1.2</literal> parameters
352 supported starting from versions 1.1.13 and 1.0.12 351 (1.1.13, 1.0.12) work only when OpenSSL 1.0.1 or higher is used.
353 so when the OpenSSL version 1.0.1 or higher 352 </note>
354 is used on older nginx versions, these protocols work, but cannot 353 <note>
355 be disabled. 354 The <literal>TLSv1.3</literal> parameter (1.13.0) works only when
355 OpenSSL 1.1.1 built with TLSv1.3 support is used.
356 </note> 356 </note>
357 </para> 357 </para>
358 358
359 </directive> 359 </directive>
360 360