ssl_password_file

Syntax:	`ssl_password_file file;`
Default:	—
Context:	`stream`, `server`

Specifies a file with passphrases for secret keys where each passphrase is specified on a separate line. Passphrases are tried in turn when loading the key.

Example:

stream {
    ssl_password_file /etc/keys/global.pass;
    ...
 
    server {
        listen 127.0.0.1:12345;
        ssl_certificate_key /etc/keys/first.key;
    }
 
    server {
        listen 127.0.0.1:12346;
 
        # named pipe can also be used instead of a file
        ssl_password_file /etc/keys/fifo;
        ssl_certificate_key /etc/keys/second.key;
    }
}

Links:

https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_password_file

doc_nginx

2025-01-10 15:47:30

Comments