Mercurial > hg > nginx-site

comparison xml/en/docs/mail/ngx_mail_ssl_module.xml @ 2350:8e35f3af574b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented the "data:" syntax for ssl_certificate and key.
author Yaroslav Zhuravlev <yar@nginx.com>
date Tue, 26 Mar 2019 17:09:15 +0300
parents e2e71f9477a8
children d8bf37d20449
comparison
equal deleted inserted replaced
2349:0eabe2f4d365 2350:8e35f3af574b
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_mail_ssl_module" 10 <module name="Module ngx_mail_ssl_module"
11 link="/en/docs/mail/ngx_mail_ssl_module.html" 11 link="/en/docs/mail/ngx_mail_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="19"> 13 rev="20">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary 18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary
139 for different certificates. 139 for different certificates.
140 With older versions, only one certificate chain can be used. 140 With older versions, only one certificate chain can be used.
141 </note> 141 </note>
142 </para> 142 </para>
143 143
144 <para id="ssl_certificate_data">
145 The value
146 <literal>data</literal>:<value>certificate</value>
147 can be specified instead of the <value>file</value> (1.15.10),
148 which loads a certificate without using intermediate files.
149 Note that inappropriate use of this syntax may have its security implications,
150 such as writing secret key data to
151 <link doc="../ngx_core_module.xml" id="error_log">error log</link>.
152 </para>
153
144 </directive> 154 </directive>
145 155
146 156
147 <directive name="ssl_certificate_key"> 157 <directive name="ssl_certificate_key">
148 <syntax><value>file</value></syntax> 158 <syntax><value>file</value></syntax>
159 The value 169 The value
160 <literal>engine</literal>:<value>name</value>:<value>id</value> 170 <literal>engine</literal>:<value>name</value>:<value>id</value>
161 can be specified instead of the <value>file</value> (1.7.9), 171 can be specified instead of the <value>file</value> (1.7.9),
162 which loads a secret key with a specified <value>id</value> 172 which loads a secret key with a specified <value>id</value>
163 from the OpenSSL engine <value>name</value>. 173 from the OpenSSL engine <value>name</value>.
174 </para>
175
176 <para id="ssl_certificate_key_data">
177 The value
178 <literal>data</literal>:<value>key</value>
179 can be specified instead of the <value>file</value> (1.15.10),
180 which loads a secret key without using intermediate files.
181 Note that inappropriate use of this syntax may have its security implications,
182 such as writing secret key data to
183 <link doc="../ngx_core_module.xml" id="error_log">error log</link>.
164 </para> 184 </para>
165 185
166 </directive> 186 </directive>
167 187
168 188