Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 2241:b7ac730b96f3

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented TLS 1.3 early data support with OpenSSL. While here, removed availability note from the $ssl_early_data description.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 25 Sep 2018 23:42:34 +0300
parents 0761b770a94e
children e2e71f9477a8
comparison
equal deleted inserted replaced
2240:a9bbf5fbec0b 2241:b7ac730b96f3
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="42"> 13 rev="43">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
309 <example> 309 <example>
310 proxy_set_header Early-Data $ssl_early_data; 310 proxy_set_header Early-Data $ssl_early_data;
311 </example> 311 </example>
312 312
313 <note> 313 <note>
314 The directive is supported only when using the 314 The directive is supported when using OpenSSL 1.1.1 or higher (1.15.4) and
315 <link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link> 315 <link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>.
316 library.
317 </note> 316 </note>
318 </para> 317 </para>
319 318
320 </directive> 319 </directive>
321 320
914 <tag-name id="var_ssl_early_data"><var>$ssl_early_data</var></tag-name> 913 <tag-name id="var_ssl_early_data"><var>$ssl_early_data</var></tag-name>
915 <tag-desc> 914 <tag-desc>
916 returns “<literal>1</literal>” if 915 returns “<literal>1</literal>” if
917 TLS 1.3 <link id="ssl_early_data">early data</link> is used 916 TLS 1.3 <link id="ssl_early_data">early data</link> is used
918 and the handshake is not complete, otherwise “” (1.15.3). 917 and the handshake is not complete, otherwise “” (1.15.3).
919 <note>
920 The variable is supported only when using the
921 <link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>
922 library.
923 </note>
924 </tag-desc> 918 </tag-desc>
925 919
926 <tag-name id="var_ssl_protocol"><var>$ssl_protocol</var></tag-name> 920 <tag-name id="var_ssl_protocol"><var>$ssl_protocol</var></tag-name>
927 <tag-desc> 921 <tag-desc>
928 returns the protocol of an established SSL connection; 922 returns the protocol of an established SSL connection;