Nginx Module Reference manual: Mail SSL Authentication module (mail SSL)

This module provides TLS support for POP3/IMAP/SMTP. Configuration is essentially the same as an HTTP SSL module, but does not support prosecutorial client certificates.

Instructions

Ssl

Syntax: SSL on | Off
Default value: SSL off
Working with fields: Mail, server
Enable SSL for this http://www.aliyun.com/zixun/aggregation/14840.html "> virtual host.

Ssl_certificate

Syntax: Ssl_certificate file
Default value: Cert.pem
Working with fields: Mail, server
To specify a PEM-formatted certificate file for this virtual host, the same file can contain other certificates, and the same key is in PEM format.

Ssl_certificate_key

Syntax: Ssl_certificate_key file
Default value: Cert.pem
Working with fields: Mail, server
Specifies a PEM-formatted key for this virtual host.

Ssl_ciphers

Syntax: Ssl_ciphers file ciphers
Default value: all:! Adh:rc4+rsa:+high:+medium:+low:+sslv2:+exp
Working with fields: Mail, server
Indicates the password that is allowed, and the password is specified as a OpenSSL supported format.

Ssl_prefer_server_ciphers

Syntax: Ssl_prefer_server_ciphers on | Off
Default value: Off
Working with fields: Mail, server
The server password that relies on the SSLV3 and TLSV1 protocols takes precedence over the client password.

Ssl_protocols

Syntax: Ssl_protocols [SSLV2] [SSLv3] [TLSV1]
Default value: SSLv2 SSLv3 TLSv1
Working with fields: Mail, server
Specifies the SSL protocol to use.

Ssl_session_cache

Syntax: Ssl_session_cache [builtin[:size [Shared:name:size]
Default value: builtin:20480
Working with fields: Mail, server
Sets the cache type and size for storing SSL sessions.
The cache type is:

Builtin-Built-in OpenSSL cache, can only be used in a worker process, the cache size is specified in the total number of sessions, note: If you want to use this type may cause memory fragmentation issues, see the reference documentation below.
Shared-Cached in all worker processes, cache size specified in bytes, 1MB cache probably holds 4,000 sessions, each shared cache must have its own name, and a cache of the same name can be used in different virtual hosts.

You can use two cache types at the same time, such as:

Ssl_session_cache builtin:1000 shared:ssl:10m;

However, it is used only if the BUILTIN does not affect the shared cache.

Ssl_session_timeout

Syntax: Ssl_session_timeout time
Default value: 5m
Working with fields: Mail, server
Sets the time that a client can reuse session parameters stored in the cache.

Starttls

Syntax: Starttls on | Off | Only
Default value: Off
Working with fields: Mail, server

On-allows the use of STARTTLS for IMAP/SMTP and Stls for POP3.
Off-prohibit command Stls and STARTTLS.
Only-enable STLS and STARTTLS on the client using TLS.