nginx-1.15.10

[Maxim Dounin]

Hello!

On Tue, Mar 26, 2019 at 09:49:40PM +0530, Anoop Alias wrote:

> On Tue, Mar 26, 2019 at 7:55 PM Maxim Dounin <mdounin at mdounin.ru> wrote:
> 
> > Changes with nginx 1.15.10                                       26 Mar
> > 2019
> >
> >
> >     *) Feature: loading of SSL certificates and secret keys from variables
> >
> 
> The doc says:
> 
> Since version 1.15.9, variables can be used in the file name when using
> OpenSSL 1.0.2 or higher:
> 
> So what's new in 1.15.10?

The difference is that in 1.15.10 you can put a certificate itself 
into a variable.  Quoting docs:

: The value data:$variable can be specified instead of the file 
: (1.15.10), which loads a certificate from a variable without using 
: intermediate files. Note that inappropriate use of this syntax may 
: have its security implications, such as writing secret key data to 
: error log.

-- 
Maxim Dounin
http://mdounin.ru/