Mercurial > hg > nginx-site
comparison xml/en/docs/mail/ngx_mail_ssl_module.xml @ 1521:e3d3e2ed4275
Added example configuration to mail and stream ssl modules.
author | Yaroslav Zhuravlev <yar@nginx.com> |
---|---|
date | Tue, 30 Jun 2015 17:08:34 +0300 |
parents | 3687cc9a3592 |
children | 6f5497797cde |
comparison
equal
deleted
inserted
replaced
1520:ed36e909bc79 | 1521:e3d3e2ed4275 |
---|---|
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> | 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> |
9 | 9 |
10 <module name="Module ngx_mail_ssl_module" | 10 <module name="Module ngx_mail_ssl_module" |
11 link="/en/docs/mail/ngx_mail_ssl_module.html" | 11 link="/en/docs/mail/ngx_mail_ssl_module.html" |
12 lang="en" | 12 lang="en" |
13 rev="7"> | 13 rev="8"> |
14 | 14 |
15 <section id="summary"> | 15 <section id="summary"> |
16 | 16 |
17 <para> | 17 <para> |
18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary | 18 The <literal>ngx_mail_ssl_module</literal> module provides the necessary |
25 configuration parameter. | 25 configuration parameter. |
26 <note> | 26 <note> |
27 This module requires the <link url="http://www.openssl.org">OpenSSL</link> | 27 This module requires the <link url="http://www.openssl.org">OpenSSL</link> |
28 library. | 28 library. |
29 </note> | 29 </note> |
30 </para> | |
31 | |
32 </section> | |
33 | |
34 | |
35 <section id="example" name="Example Configuration"> | |
36 | |
37 <para> | |
38 To reduce the processor load, it is recommended to | |
39 <list type="bullet"> | |
40 | |
41 <listitem> | |
42 set the number of worker processes equal to the number of processors, | |
43 </listitem> | |
44 | |
45 <listitem> | |
46 enable the shared session cache, | |
47 </listitem> | |
48 | |
49 <listitem> | |
50 disable the built-in session cache, | |
51 </listitem> | |
52 | |
53 <listitem> | |
54 and possibly increase the session lifetime (by default, 5 minutes): | |
55 </listitem> | |
56 | |
57 </list> | |
58 | |
59 <example> | |
60 <emphasis>worker_processes auto;</emphasis> | |
61 | |
62 mail { | |
63 | |
64 ... | |
65 | |
66 server { | |
67 listen 993 ssl; | |
68 | |
69 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; | |
70 ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; | |
71 ssl_certificate /usr/local/nginx/conf/cert.pem; | |
72 ssl_certificate_key /usr/local/nginx/conf/cert.key; | |
73 <emphasis>ssl_session_cache shared:SSL:10m;</emphasis> | |
74 <emphasis>ssl_session_timeout 10m;</emphasis> | |
75 | |
76 ... | |
77 } | |
78 </example> | |
30 </para> | 79 </para> |
31 | 80 |
32 </section> | 81 </section> |
33 | 82 |
34 | 83 |