Mastering Nginx

(Ron) #1

Directive Reference


[ 254 ]

Directive Explanation Context/Default
ssl (http) Enables the HTTPS protocol for
this virtual server.

Valid contexts: http,
server
Default value: off
ssl (mail) Indicates if this context should
support SSL/TLS transactions.

Valid contexts: mail,
server
Default value: off
ssl_certificate
(http)

The path to the file containing
the SSL certificate for this
server_name in PEM format.
If intermediate certificates are
required, they need to be added
in order after the certificate
corresponding to the server_
name directive, up to the root, if
necessary.

Valid contexts: http,
server
Default value: -

ssl_certificate
(mail)

The path to the PEM-encoded SSL
certificate(s) for this virtual server.

Valid contexts: mail,
server
Default value: -
ssl_certificate_key
(http)

The path to the file containing the
SSL certificate's secret key.

Valid contexts: http,
server
Default value: -
ssl_certificate_key
(mail)

The path to the PEM-encoded SSL
secret key for this virtual server.

Valid contexts: mail,
server
Default value: -
ssl_ciphers The ciphers that should be
supported in this virtual server
context (OpenSSL format).

Valid contexts: http,
server
Default value:
HIGH:!aNULL:!MD5
ssl_client_
certificate

The path to the file containing
the PEM-encoded public CA
certificate(s) of the certificate
authorities used to sign client
certificates.

Valid contexts: http,
server
Default value: -

ssl_crl The path to the file containing
the PEM-encoded certificate
revocation list (CRL) for the client
certificates that are to be verified.

Valid contexts: http,
server
Default value: -

ssl_dhparam The path to a file containing DH
parameters, used for EDH ciphers.

Valid contexts: http,
server
Default value: -
Free download pdf