Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 2616:d8bf37d20449

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented the ssl_conf_command directive.
author Yaroslav Zhuravlev <yar@nginx.com>
date Tue, 27 Oct 2020 22:03:34 +0000
parents ffc4083f5c7e
children 0b98a81f196b
comparison
equal deleted inserted replaced
2615:3cb2736bb74c 2616:d8bf37d20449
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="49"> 13 rev="50">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
294 </para> 294 </para>
295 295
296 </directive> 296 </directive>
297 297
298 298
299 <directive name="ssl_conf_command">
300 <syntax><value>command</value></syntax>
301 <default/>
302 <context>http</context>
303 <context>server</context>
304 <appeared-in>1.19.4</appeared-in>
305
306 <para>
307 Sets arbitrary OpenSSL configuration
308 <link url="https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html">commands</link>.
309 <note>
310 The directive is supported when using OpenSSL 1.0.2 or higher.
311 </note>
312 </para>
313
314 <para>
315 Several <literal>ssl_conf_command</literal> directives
316 can be specified on the same level:
317 <example>
318 ssl_conf_command Options PrioritizeChaCha;
319 ssl_conf_command Ciphersuites TLS_CHACHA20_POLY1305_SHA256;
320 </example>
321 These directives are inherited from the previous configuration level
322 if and only if there are no <literal>ssl_conf_command</literal> directives
323 defined on the current level.
324 </para>
325
326 <para>
327 <note>
328 Note that configuring OpenSSL directly
329 might result in unexpected behavior.
330 </note>
331 </para>
332
333 </directive>
334
335
299 <directive name="ssl_crl"> 336 <directive name="ssl_crl">
300 <syntax><value>file</value></syntax> 337 <syntax><value>file</value></syntax>
301 <default/> 338 <default/>
302 <context>http</context> 339 <context>http</context>
303 <context>server</context> 340 <context>server</context>