]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9f30fda) | patch
SSL: support for TLSv1.3 early data with BoringSSL.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 6 Aug 2018 23:16:07 +0000 (02:16 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 6 Aug 2018 23:16:07 +0000 (02:16 +0300)
commit3b1589173f28fccb5816669f3ff4c9ac1e9b573c
treea9b81f58683ac588817fd394c3f3f06fe94e312atree | snapshot
parent9f30fda1c2e24058e91a8c637c0717b32be399dacommit | diff
SSL: support for TLSv1.3 early data with BoringSSL.

Early data AKA 0-RTT mode is enabled as long as "ssl_early_data on" is
specified in the configuration (default is off).

The $ssl_early_data variable evaluates to "1" if the SSL handshake
isn't yet completed, and can be used to set the Early-Data header as
per draft-ietf-httpbis-replay-04.
src/event/ngx_event_openssl.c diff | blob | history
src/event/ngx_event_openssl.h diff | blob | history
src/http/modules/ngx_http_ssl_module.c diff | blob | history
src/http/modules/ngx_http_ssl_module.h diff | blob | history
nginx upstream