Mercurial > hg > nginx-site
comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 1877:aa29a64a5e9d
Documented ssl_session_ticket_key 80-byte keys.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Mon, 26 Dec 2016 16:06:26 +0300 |
parents | 5f156621b8b5 |
children | 66a30a380fba |
comparison
equal
deleted
inserted
replaced
1876:b451f03e0a4b | 1877:aa29a64a5e9d |
---|---|
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> | 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> |
9 | 9 |
10 <module name="Module ngx_http_ssl_module" | 10 <module name="Module ngx_http_ssl_module" |
11 link="/en/docs/http/ngx_http_ssl_module.html" | 11 link="/en/docs/http/ngx_http_ssl_module.html" |
12 lang="en" | 12 lang="en" |
13 rev="31"> | 13 rev="32"> |
14 | 14 |
15 <section id="summary"> | 15 <section id="summary"> |
16 | 16 |
17 <para> | 17 <para> |
18 The <literal>ngx_http_ssl_module</literal> module provides the | 18 The <literal>ngx_http_ssl_module</literal> module provides the |
503 ssl_session_ticket_key previous.key; | 503 ssl_session_ticket_key previous.key; |
504 </example> | 504 </example> |
505 </para> | 505 </para> |
506 | 506 |
507 <para> | 507 <para> |
508 The <value>file</value> must contain 48 bytes of random data and can | 508 The <value>file</value> must contain 80 or 48 bytes |
509 be created using the following command: | 509 of random data and can be created using the following command: |
510 <example> | 510 <example> |
511 openssl rand 48 > ticket.key | 511 openssl rand 80 > ticket.key |
512 </example> | 512 </example> |
513 Depending on the file size either AES256 (for 80-byte keys, 1.11.8) | |
514 or AES128 (for 48-byte keys) is used for encryption. | |
513 </para> | 515 </para> |
514 | 516 |
515 </directive> | 517 </directive> |
516 | 518 |
517 | 519 |