changeset 2241:b7ac730b96f3

Documented TLS 1.3 early data support with OpenSSL. While here, removed availability note from the $ssl_early_data description.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 25 Sep 2018 23:42:34 +0300
parents a9bbf5fbec0b
children c06151558e93
files xml/en/docs/http/ngx_http_ssl_module.xml xml/ru/docs/http/ngx_http_ssl_module.xml
diffstat 2 files changed, 5 insertions(+), 15 deletions(-) [+]
line wrap: on
line diff
--- a/xml/en/docs/http/ngx_http_ssl_module.xml
+++ b/xml/en/docs/http/ngx_http_ssl_module.xml
@@ -10,7 +10,7 @@
 <module name="Module ngx_http_ssl_module"
         link="/en/docs/http/ngx_http_ssl_module.html"
         lang="en"
-        rev="42">
+        rev="43">
 
 <section id="summary">
 
@@ -311,9 +311,8 @@ proxy_set_header Early-Data $ssl_early_d
 </example>
 
 <note>
-The directive is supported only when using the
-<link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>
-library.
+The directive is supported when using OpenSSL 1.1.1 or higher (1.15.4) and
+<link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>.
 </note>
 </para>
 
@@ -916,11 +915,6 @@ The variable is available only for new s
 returns “<literal>1</literal>” if
 TLS 1.3 <link id="ssl_early_data">early data</link> is used
 and the handshake is not complete, otherwise “” (1.15.3).
-<note>
-The variable is supported only when using the
-<link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>
-library.
-</note>
 </tag-desc>
 
 <tag-name id="var_ssl_protocol"><var>$ssl_protocol</var></tag-name>
--- a/xml/ru/docs/http/ngx_http_ssl_module.xml
+++ b/xml/ru/docs/http/ngx_http_ssl_module.xml
@@ -10,7 +10,7 @@
 <module name="Модуль ngx_http_ssl_module"
         link="/ru/docs/http/ngx_http_ssl_module.html"
         lang="ru"
-        rev="42">
+        rev="43">
 
 <section id="summary">
 
@@ -313,7 +313,7 @@ proxy_set_header Early-Data $ssl_early_d
 </example>
 
 <note>
-Директива поддерживается только при использовании библиотеки
+Директива поддерживается при использовании OpenSSL 1.1.1 и выше (1.15.4) или
 <link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>.
 </note>
 </para>
@@ -919,10 +919,6 @@ 0x001d:prime256v1:secp521r1:secp384r1
 возвращает “<literal>1</literal>”, если
 используется TLS 1.3 <link id="ssl_early_data">early data</link>
 и операция handshake не завершена, иначе “” (1.15.3).
-<note>
-Переменная поддерживается только при использовании библиотеки
-<link url="https://boringssl.googlesource.com/boringssl/">BoringSSL</link>.
-</note>
 </tag-desc>
 
 <tag-name id="var_ssl_protocol"><var>$ssl_protocol</var></tag-name>