Skip to content

Commit

Permalink
Merge pull request #348 from pwilczynskiclearcode/master
Browse files Browse the repository at this point in the history
HTTPS.rst: Added a note about required system packages when HTTPS is used
  • Loading branch information
unbit committed Mar 8, 2017
2 parents 1e7dd92 + 9522444 commit dcdb1fc
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions HTTPS.rst
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ HTTPS support (from 1.3)
============================

Use the ``https <socket>,<certificate>,<key>`` option. This option may be
specified multiple times. First generate your server key, certificate signing
specified multiple times. First generate your server key, certificate signing
request, and self-sign the certificate using the OpenSSL toolset:

.. note:: You'll want a real SSL certificate for production use.
Expand All @@ -28,6 +28,10 @@ and use the shared socket 0 (``=0``) for HTTPS.

.. note:: The =0 syntax is currently undocumented.

.. note:: In order to use `https` option be sure that you have OpenSSL
development headers installed (e.g. libssl-dev on Debian). Install them
and rebuild uWSGI so the build system will automatically detect it.

Setting SSL/TLS ciphers
-----------------------

Expand All @@ -53,7 +57,7 @@ Client certificate authentication
---------------------------------

The ``https`` option can also take an optional 5th argument. You can use it to
specify a CA certificate to authenticate your clients with. Generate your CA
specify a CA certificate to authenticate your clients with. Generate your CA
key and certificate (this time the key will be 4096 bits and
password-protected)::

Expand Down

0 comments on commit dcdb1fc

Please sign in to comment.