Mercurial > hg > nginx-site

comparison xml/en/docs/mail/ngx_mail_ssl_module.xml @ 2616:d8bf37d20449

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented the ssl_conf_command directive.
author Yaroslav Zhuravlev <yar@nginx.com>
date Tue, 27 Oct 2020 22:03:34 +0000
parents 8e35f3af574b
children 78161967514f
comparison
equal deleted inserted replaced
2615:3cb2736bb74c 2616:d8bf37d20449
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_mail_ssl_module" 10 <module name="Module ngx_mail_ssl_module"
11 link="/en/docs/mail/ngx_mail_ssl_module.html" 11 link="/en/docs/mail/ngx_mail_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="20"> 13 rev="21">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary 18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary
231 231
232 <para> 232 <para>
233 The list of certificates will be sent to clients. 233 The list of certificates will be sent to clients.
234 If this is not desired, the <link id="ssl_trusted_certificate"/> 234 If this is not desired, the <link id="ssl_trusted_certificate"/>
235 directive can be used. 235 directive can be used.
236 </para>
237
238 </directive>
239
240
241 <directive name="ssl_conf_command">
242 <syntax><value>command</value></syntax>
243 <default/>
244 <context>mail</context>
245 <context>server</context>
246 <appeared-in>1.19.4</appeared-in>
247
248 <para>
249 Sets arbitrary OpenSSL configuration
250 <link url="https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html">commands</link>.
251 <note>
252 The directive is supported when using OpenSSL 1.0.2 or higher.
253 </note>
254 </para>
255
256 <para>
257 Several <literal>ssl_conf_command</literal> directives
258 can be specified on the same level:
259 <example>
260 ssl_conf_command Options PrioritizeChaCha;
261 ssl_conf_command Ciphersuites TLS_CHACHA20_POLY1305_SHA256;
262 </example>
263 These directives are inherited from the previous configuration level
264 if and only if there are no <literal>ssl_conf_command</literal> directives
265 defined on the current level.
266 </para>
267
268 <para>
269 <note>
270 Note that configuring OpenSSL directly
271 might result in unexpected behavior.
272 </note>
236 </para> 273 </para>
237 274
238 </directive> 275 </directive>
239 276
240 277