Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Current 'mode' for verifying peer certificate is a global option, it's good to have specific mode among different sites hosted on a same machine. If the mode is non-empty, it would be the preference when making the decision to verify peer or not. Otherwise, the global mode will take effect.
  • # Client certification level should be:
  1. 0 no client certificates
  2. 1 client certificates optional
  3. 2 client certificates required
    CONFIG proxy.config.ssl.client.certification_level INT 0

2. Optimization on TLS record size

...