Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 1711:38fb3e6b71e8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented ssl_ecdh_curve changes in 1.11.0.
author Maxim Dounin <mdounin@mdounin.ru>
date Fri, 27 May 2016 19:05:15 +0300
parents 6f5497797cde
children 67b5aac350e4
comparison
equal deleted inserted replaced
1710:692d34a2adfc 1711:38fb3e6b71e8
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="20"> 13 rev="21">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
276 </directive> 276 </directive>
277 277
278 278
279 <directive name="ssl_ecdh_curve"> 279 <directive name="ssl_ecdh_curve">
280 <syntax><value>curve</value></syntax> 280 <syntax><value>curve</value></syntax>
281 <default>prime256v1</default> 281 <default>auto</default>
282 <context>http</context> 282 <context>http</context>
283 <context>server</context> 283 <context>server</context>
284 <appeared-in>1.1.0</appeared-in> 284 <appeared-in>1.1.0</appeared-in>
285 <appeared-in>1.0.6</appeared-in> 285 <appeared-in>1.0.6</appeared-in>
286 286
287 <para> 287 <para>
288 Specifies a <value>curve</value> for ECDHE ciphers. 288 Specifies a <value>curve</value> for ECDHE ciphers.
289 </para>
290
291 <para>
292 When using OpenSSL 1.0.2 or higher,
293 it is possible to specify multiple curves (1.11.0), for example:
294 <example>
295 ssl_ecdh_curve prime256v1:secp384r1;
296 </example>
297 </para>
298
299 <para>
300 The special value <literal>auto</literal> (1.11.0) instructs nginx to use
301 a list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,
302 or <literal>prime256v1</literal> with older versions.
303 </para>
304
305 <para>
306 <note>
307 Prior to version 1.11.0,
308 the <literal>prime256v1</literal> curve was used by default.
309 </note>
289 </para> 310 </para>
290 311
291 </directive> 312 </directive>
292 313
293 314