Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 1877:aa29a64a5e9d

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented ssl_session_ticket_key 80-byte keys.
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 26 Dec 2016 16:06:26 +0300
parents 5f156621b8b5
children 66a30a380fba
comparison
equal deleted inserted replaced
1876:b451f03e0a4b 1877:aa29a64a5e9d
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="31"> 13 rev="32">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
503 ssl_session_ticket_key previous.key; 503 ssl_session_ticket_key previous.key;
504 </example> 504 </example>
505 </para> 505 </para>
506 506
507 <para> 507 <para>
508 The <value>file</value> must contain 48 bytes of random data and can 508 The <value>file</value> must contain 80 or 48 bytes
509 be created using the following command: 509 of random data and can be created using the following command:
510 <example> 510 <example>
511 openssl rand 48 > ticket.key 511 openssl rand 80 > ticket.key
512 </example> 512 </example>
513 Depending on the file size either AES256 (for 80-byte keys, 1.11.8)
514 or AES128 (for 48-byte keys) is used for encryption.
513 </para> 515 </para>
514 516
515 </directive> 517 </directive>
516 518
517 519