ssl_engine

The ssl_engine directive specifies the SSL library to be used by NGINX for SSL connections.

Syntaxssl_engine engine_name;
Defaultnone
Contextmain
Arguments1

Description

The 'ssl_engine' directive allows users to define which SSL engine NGINX should use for handling secure connections. By default, NGINX uses the OpenSSL library unless configured otherwise. This directive can be useful in scenarios where a user wants to utilize a different SSL implementation such as GnuTLS or a custom SSL library for enhanced features or performance. The directive only takes a single argument which corresponds to the name of the desired SSL engine.

When the directive is used, it is essential that the specified SSL engine is compiled into NGINX, or the command will fail at runtime, leading to potential start-up errors. This flexibility allows system administrators to fine-tune how NGINX handles SSL/TLS requests based on their infrastructure or application requirements. Users should always verify compatibility between their chosen SSL engine and the current NGINX setup, as well as its overall performance and security features.

Config Example

ssl_engine 'openssl';

Ensure that the specified SSL engine is compiled into NGINX; otherwise, NGINX may fail to start.

Using an unsupported or improperly configured SSL engine may lead to SSL handshake failures or performance issues.

← Back to all directives