Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 763:cd581dbdaf76

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
The "optional_no_ca" parameter of the "ssl_verify_client" directive was merged into 1.2.5.
author Ruslan Ermilov <ru@nginx.com>
date Tue, 13 Nov 2012 10:54:15 +0000
parents c5facf2eff6f
children b95a6d779c89
comparison
equal deleted inserted replaced
762:3974a50b2142 763:cd581dbdaf76
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="4"> 13 rev="5">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
496 The <literal>optional</literal> parameter (0.8.7+) requests the client 496 The <literal>optional</literal> parameter (0.8.7+) requests the client
497 certificate, and if certificate was present, verifies it. 497 certificate, and if certificate was present, verifies it.
498 </para> 498 </para>
499 499
500 <para> 500 <para>
501 The <literal>optional_no_ca</literal> parameter (1.3.8) requests the client 501 The <literal>optional_no_ca</literal> parameter (1.3.8, 1.2.5)
502 requests the client
502 certificate but does not require it to be signed by a trusted CA certificate. 503 certificate but does not require it to be signed by a trusted CA certificate.
503 This is intended for the use in cases where actual certificate verification 504 This is intended for the use in cases where actual certificate verification
504 is performed by a service that is external to nginx. 505 is performed by a service that is external to nginx.
505 The contents of a certificate is made available through the 506 The contents of a certificate is made available through the
506 <var>$ssl_client_cert</var> variable. 507 <var>$ssl_client_cert</var> variable.