diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2018-08-07 02:16:07 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2018-08-07 02:16:07 +0300 |
| commit | 3b1589173f28fccb5816669f3ff4c9ac1e9b573c (patch) | |
| tree | a9b81f58683ac588817fd394c3f3f06fe94e312a /src/http/modules/ngx_http_ssl_module.h | |
| parent | 9f30fda1c2e24058e91a8c637c0717b32be399da (diff) | |
| download | nginx-3b1589173f28fccb5816669f3ff4c9ac1e9b573c.tar.gz nginx-3b1589173f28fccb5816669f3ff4c9ac1e9b573c.zip | |
SSL: support for TLSv1.3 early data with BoringSSL.
Early data AKA 0-RTT mode is enabled as long as "ssl_early_data on" is
specified in the configuration (default is off).
The $ssl_early_data variable evaluates to "1" if the SSL handshake
isn't yet completed, and can be used to set the Early-Data header as
per draft-ietf-httpbis-replay-04.
Diffstat (limited to 'src/http/modules/ngx_http_ssl_module.h')
| -rw-r--r-- | src/http/modules/ngx_http_ssl_module.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/http/modules/ngx_http_ssl_module.h b/src/http/modules/ngx_http_ssl_module.h index 57f5941d4..fb3219b63 100644 --- a/src/http/modules/ngx_http_ssl_module.h +++ b/src/http/modules/ngx_http_ssl_module.h @@ -20,6 +20,7 @@ typedef struct { ngx_ssl_t ssl; ngx_flag_t prefer_server_ciphers; + ngx_flag_t early_data; ngx_uint_t protocols; |