Directive Reference
[ 254 ]
Directive Explanation Context/Default
ssl (http) Enables the HTTPS protocol for
this virtual server.
Valid contexts: http,
server
Default value: off
ssl (mail) Indicates if this context should
support SSL/TLS transactions.
Valid contexts: mail,
server
Default value: off
ssl_certificate
(http)
The path to the file containing
the SSL certificate for this
server_name in PEM format.
If intermediate certificates are
required, they need to be added
in order after the certificate
corresponding to the server_
name directive, up to the root, if
necessary.
Valid contexts: http,
server
Default value: -
ssl_certificate
(mail)
The path to the PEM-encoded SSL
certificate(s) for this virtual server.
Valid contexts: mail,
server
Default value: -
ssl_certificate_key
(http)
The path to the file containing the
SSL certificate's secret key.
Valid contexts: http,
server
Default value: -
ssl_certificate_key
(mail)
The path to the PEM-encoded SSL
secret key for this virtual server.
Valid contexts: mail,
server
Default value: -
ssl_ciphers The ciphers that should be
supported in this virtual server
context (OpenSSL format).
Valid contexts: http,
server
Default value:
HIGH:!aNULL:!MD5
ssl_client_
certificate
The path to the file containing
the PEM-encoded public CA
certificate(s) of the certificate
authorities used to sign client
certificates.
Valid contexts: http,
server
Default value: -
ssl_crl The path to the file containing
the PEM-encoded certificate
revocation list (CRL) for the client
certificates that are to be verified.
Valid contexts: http,
server
Default value: -
ssl_dhparam The path to a file containing DH
parameters, used for EDH ciphers.
Valid contexts: http,
server
Default value: -