comparison xml/en/docs/mail/ngx_mail_ssl_module.xml @ 1521:e3d3e2ed4275

Added example configuration to mail and stream ssl modules.
author Yaroslav Zhuravlev <yar@nginx.com>
date Tue, 30 Jun 2015 17:08:34 +0300
parents 3687cc9a3592
children 6f5497797cde
comparison
equal deleted inserted replaced
1520:ed36e909bc79 1521:e3d3e2ed4275
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_mail_ssl_module" 10 <module name="Module ngx_mail_ssl_module"
11 link="/en/docs/mail/ngx_mail_ssl_module.html" 11 link="/en/docs/mail/ngx_mail_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="7"> 13 rev="8">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary 18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary
25 configuration parameter. 25 configuration parameter.
26 <note> 26 <note>
27 This module requires the <link url="http://www.openssl.org">OpenSSL</link> 27 This module requires the <link url="http://www.openssl.org">OpenSSL</link>
28 library. 28 library.
29 </note> 29 </note>
30 </para>
31
32 </section>
33
34
35 <section id="example" name="Example Configuration">
36
37 <para>
38 To reduce the processor load, it is recommended to
39 <list type="bullet">
40
41 <listitem>
42 set the number of worker processes equal to the number of processors,
43 </listitem>
44
45 <listitem>
46 enable the shared session cache,
47 </listitem>
48
49 <listitem>
50 disable the built-in session cache,
51 </listitem>
52
53 <listitem>
54 and possibly increase the session lifetime (by default, 5 minutes):
55 </listitem>
56
57 </list>
58
59 <example>
60 <emphasis>worker_processes auto;</emphasis>
61
62 mail {
63
64 ...
65
66 server {
67 listen 993 ssl;
68
69 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
70 ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
71 ssl_certificate /usr/local/nginx/conf/cert.pem;
72 ssl_certificate_key /usr/local/nginx/conf/cert.key;
73 <emphasis>ssl_session_cache shared:SSL:10m;</emphasis>
74 <emphasis>ssl_session_timeout 10m;</emphasis>
75
76 ...
77 }
78 </example>
30 </para> 79 </para>
31 80
32 </section> 81 </section>
33 82
34 83