Welcome! Log In Create A New Profile

Advanced

Re: nginx-1.15.10

Maxim Dounin
March 26, 2019 01:46PM
Hello!

On Tue, Mar 26, 2019 at 06:16:39PM +0100, A. Schulze wrote:

> Am 26.03.19 um 17:50 schrieb Maxim Dounin:
> > The difference is that in 1.15.10 you can put a certificate itself
> > into a variable. Quoting docs:
> >
> > : The value data:$variable can be specified instead of the file
> > : (1.15.10), which loads a certificate from a variable without using
> > : intermediate files. Note that inappropriate use of this syntax may
> > : have its security implications, such as writing secret key data to
> > : error log.
>
> Hello Maxim,
>
> could you more verbose about the intended use-case?
> that would make the feature more transparent (at least to me)

This is intended to be used with some external means of providing
certificates and keys, such as perl or njs code, or a keyval
database (http://nginx.org/r/keyval).

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

nginx-1.15.10

Maxim Dounin March 26, 2019 10:26AM

Re: nginx-1.15.10

Anoop Alias March 26, 2019 12:20PM

Re: nginx-1.15.10

Maxim Dounin March 26, 2019 12:52PM

Re: nginx-1.15.10

A. Schulze March 26, 2019 01:18PM

Re: nginx-1.15.10

Maxim Dounin March 26, 2019 01:46PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 308
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready