You might be better of with nginx stream to offload (ssl/tls), all of it is
then encrypted.
stream {
upstream backendsmtp {
server 192.168.3.32:25;
}
server {
listen 1234 ssl;
ssl_certificate /nginx/crts/global1.cert;
ssl_certificate_key /nginx/crts/global1.key;
include /nginx/conf/sslciphers.conf;
proxy_pass backendsmtp;
....................
Posted at Nginx Forum:
https://forum.nginx.org/read.php?2,284426,284468#msg-284468
_______________________________________________
nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx