Mercurial > hg > nginx-site
diff xml/en/docs/stream/ngx_stream_ssl_module.xml @ 2350:8e35f3af574b
Documented the "data:" syntax for ssl_certificate and key.
author | Yaroslav Zhuravlev <yar@nginx.com> |
---|---|
date | Tue, 26 Mar 2019 17:09:15 +0300 |
parents | dbe55598d3f6 |
children | c60a8a15010c |
line wrap: on
line diff
--- a/xml/en/docs/stream/ngx_stream_ssl_module.xml +++ b/xml/en/docs/stream/ngx_stream_ssl_module.xml @@ -9,7 +9,7 @@ <module name="Module ngx_stream_ssl_module" link="/en/docs/stream/ngx_stream_ssl_module.html" lang="en" - rev="20"> + rev="21"> <section id="summary"> @@ -130,6 +130,16 @@ a certificate will be loaded for each SS and this may have a negative impact on performance. </para> +<para id="ssl_certificate_data"> +The value +<literal>data</literal>:<value>$variable</value> +can be specified instead of the <value>file</value> (1.15.10), +which loads a certificate from a variable without using intermediate files. +Note that inappropriate use of this syntax may have its security implications, +such as writing secret key data to +<link doc="../ngx_core_module.xml" id="error_log">error log</link>. +</para> + </directive> @@ -152,6 +162,16 @@ which loads a secret key with a specifie from the OpenSSL engine <value>name</value>. </para> +<para id="ssl_certificate_key_data"> +The value +<literal>data</literal>:<value>$variable</value> +can be specified instead of the <value>file</value> (1.15.10), +which loads a secret key from a variable without using intermediate files. +Note that inappropriate use of this syntax may have its security implications, +such as writing secret key data to +<link doc="../ngx_core_module.xml" id="error_log">error log</link>. +</para> + <para> Since version 1.15.9, variables can be used in the <value>file</value> name when using OpenSSL 1.0.2 or higher.