comparison xml/ru/docs/http/ngx_http_ssl_module.xml @ 1411:8fe28c6edaa1

Removed SSLv3 from ssl_protocols parameters list as insecure example.
author Sergey Budnevitch <sb@waeme.net>
date Tue, 10 Feb 2015 14:08:24 +0300
parents 35cf5dca5fa4
children 933831d7bf0b
comparison
equal deleted inserted replaced
1410:f5dcc23b214f 1411:8fe28c6edaa1
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Модуль ngx_http_ssl_module" 10 <module name="Модуль ngx_http_ssl_module"
11 link="/ru/docs/http/ngx_http_ssl_module.html" 11 link="/ru/docs/http/ngx_http_ssl_module.html"
12 lang="ru" 12 lang="ru"
13 rev="16"> 13 rev="17">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 Модуль <literal>ngx_http_ssl_module</literal> обеспечивает работу 18 Модуль <literal>ngx_http_ssl_module</literal> обеспечивает работу
69 69
70 server { 70 server {
71 listen 443 ssl; 71 listen 443 ssl;
72 <emphasis>keepalive_timeout 70;</emphasis> 72 <emphasis>keepalive_timeout 70;</emphasis>
73 73
74 ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; 74 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
75 ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; 75 ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
76 ssl_certificate /usr/local/nginx/conf/cert.pem; 76 ssl_certificate /usr/local/nginx/conf/cert.pem;
77 ssl_certificate_key /usr/local/nginx/conf/cert.key; 77 ssl_certificate_key /usr/local/nginx/conf/cert.key;
78 <emphasis>ssl_session_cache shared:SSL:10m;</emphasis> 78 <emphasis>ssl_session_cache shared:SSL:10m;</emphasis>
79 <emphasis>ssl_session_timeout 10m;</emphasis> 79 <emphasis>ssl_session_timeout 10m;</emphasis>