diff xml/en/docs/http/ngx_http_ssl_module.xml @ 1726:a0bc284941f6

Documented multiple certificates support.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 07 Jun 2016 19:00:50 +0300
parents 67b5aac350e4
children 3fa0944ddc6a
line wrap: on
line diff
--- a/xml/en/docs/http/ngx_http_ssl_module.xml	Tue Jun 07 19:00:39 2016 +0300
+++ b/xml/en/docs/http/ngx_http_ssl_module.xml	Tue Jun 07 19:00:50 2016 +0300
@@ -10,7 +10,7 @@
 <module name="Module ngx_http_ssl_module"
         link="/en/docs/http/ngx_http_ssl_module.html"
         lang="en"
-        rev="22">
+        rev="23">
 
 <section id="summary">
 
@@ -146,6 +146,32 @@
 </para>
 
 <para>
+Since version 1.11.0,
+this directive can be specified multiple times
+to load certificates of different types, for example, RSA and ECDSA:
+<example>
+server {
+    listen              443 ssl;
+    server_name         example.com;
+
+    ssl_certificate     example.com.rsa.crt;
+    ssl_certificate_key example.com.rsa.key;
+
+    ssl_certificate     example.com.ecdsa.crt;
+    ssl_certificate_key example.com.ecdsa.key;
+
+    ...
+}
+</example>
+<note>
+Only OpenSSL 1.0.2 or higher supports separate
+<link doc="configuring_https_servers.xml" id="chains">certificate chains</link>
+for different certificates.
+With older versions, only one certificate chain can be used.
+</note>
+</para>
+
+<para>
 It should be kept in mind that due to the HTTPS protocol limitations
 virtual servers should listen on different IP addresses:
 <example>