diff --git a/nova/conf/wsgi.py b/nova/conf/wsgi.py
index 6883b28f51ad..50e653d083bc 100644
--- a/nova/conf/wsgi.py
+++ b/nova/conf/wsgi.py
@@ -71,6 +71,12 @@ Possible values:
     cfg.StrOpt(
         'secure_proxy_ssl_header',
         deprecated_group='DEFAULT',
+        deprecated_for_removal=True,
+        deprecated_since='31.0.0',
+        deprecated_reason="""
+The functionality of this parameter is duplicate of the http_proxy_to_wsgi
+middleware of oslo.middleware and will be completely replaced.
+""",
         help="""
 This option specifies the HTTP header used to determine the protocol scheme
 for the original request, even if it was removed by a SSL terminating proxy.
diff --git a/releasenotes/notes/deprecate-secure_proxy_ssl_header-cc0bf562efaa5eba.yaml b/releasenotes/notes/deprecate-secure_proxy_ssl_header-cc0bf562efaa5eba.yaml
new file mode 100644
index 000000000000..8e3fc02287e3
--- /dev/null
+++ b/releasenotes/notes/deprecate-secure_proxy_ssl_header-cc0bf562efaa5eba.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - |
+    The ``[wsgi] secure_proxy_ssl_header`` parameter has been deprecated. Use
+    the ``http_proxy_to_wsgi`` middleware from ``oslo.middleware`` instead.