The ssl application uses the Erlang applications public_key and crypto to handle public keys and encryption, hence these applications needs to be loaded for the ssl application to work. In an embedded environment that means they need to be started with application:start/[1,2] before the ssl application is started.


The following application environment configuration parameters are defined for the SSL application. See application(3erl)for more information about configuration parameters.

Note that the environment parameters can be set on the command line, for instance,

erl ... -ssl protocol_version '[tlsv1.1, tlsv1]' ....

protocol_version = [tlsv1|tlsv1.1|tlsv1.2] <optional>.: Protocol that will be supported by started clients and servers. If this option is not set it will default to all protocols currently supported by the erlang ssl application. Note that this option may be overridden by the version option to ssl:connect/[2,3] and ssl:listen/2.

For Debian GNU/Linux distribution the sslv3 protocol was disabled due to its security issues.

session_lifetime = integer() <optional>: The lifetime of session data in seconds.

session_cb = atom() <optional>: Name of session cache callback module that implements the ssl_session_cache_api behavior, defaults to ssl_session_cache.erl.

session_cb_init_args = list() <optional>: List of arguments to the init function in session cache callback module, defaults to [].