aboutsummaryrefslogtreecommitdiffstats
path: root/manual
diff options
context:
space:
mode:
Diffstat (limited to 'manual')
-rw-r--r--manual/ranch_ssl.md11
1 files changed, 10 insertions, 1 deletions
diff --git a/manual/ranch_ssl.md b/manual/ranch_ssl.md
index 4d473ba..af271a5 100644
--- a/manual/ranch_ssl.md
+++ b/manual/ranch_ssl.md
@@ -14,10 +14,12 @@ Types
| {ciphers, [ssl:erl_cipher_suite()] | string()}
| {fail_if_no_peer_cert, boolean()}
| {hibernate_after, integer() | undefined}
+ | {honor_cipher_order, boolean()}
| {ip, inet:ip_address()}
| {key, Der::binary()}
| {keyfile, string()}
| {linger, {boolean(), non_neg_integer()}}
+ | {log_alert, boolean()}
| {next_protocols_advertised, [binary()]}
| {nodelay, boolean()}
| {password, string()}
@@ -29,7 +31,8 @@ Types
| {send_timeout, timeout()}
| {send_timeout_close, boolean()}
| {verify, ssl:verify_type()}
- | {verify_fun, {fun(), InitialUserState::term()}}]
+ | {verify_fun, {fun(), InitialUserState::term()}},
+ | {versions, [atom()]}].
> Listen options.
>
@@ -61,6 +64,8 @@ The default value is given next to the option name.
- Whether to refuse the connection if the client sends an empty certificate.
- hibernate_after (undefined)
- Time in ms after which SSL socket processes go into hibernation to reduce memory usage.
+ - honor_cipher_order (false)
+ - If true, use the server's preference for cipher selection. If false (the default), use the client's preference.
- ip
- Interface to listen on. Listen on all interfaces by default.
- key
@@ -69,6 +74,8 @@ The default value is given next to the option name.
- Path to the PEM encoded private key file, if different than the certfile.
- linger ({false, 0})
- Whether to wait and how long to flush data sent before closing the socket.
+ - log_alert (true)
+ - If false, error reports will not be displayed.
- next_protocols_advertised
- List of protocols to send to the client if it supports the Next Protocol extension.
- nodelay (true)
@@ -91,6 +98,8 @@ The default value is given next to the option name.
- Use `verify_peer` to request a certificate from the client.
- verify_fun
- Custom policy to decide whether a client certificate is valid.
+ - versions
+ - TLS protocol versions that will be supported.
Note that the client will not send a certificate unless the
value for the `verify` option is set to `verify_peer`. This