comparison src/http/modules/ngx_http_ssl_module.h @ 7333:ba971deb4b44

SSL: support for TLSv1.3 early data with BoringSSL. Early data AKA 0-RTT mode is enabled as long as "ssl_early_data on" is specified in the configuration (default is off). The $ssl_early_data variable evaluates to "1" if the SSL handshake isn't yet completed, and can be used to set the Early-Data header as per draft-ietf-httpbis-replay-04.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 07 Aug 2018 02:16:07 +0300
parents 51e1f047d15d
children be2af41d3620
comparison
equal deleted inserted replaced
7332:7ad0f4ace359 7333:ba971deb4b44
18 ngx_flag_t enable; 18 ngx_flag_t enable;
19 19
20 ngx_ssl_t ssl; 20 ngx_ssl_t ssl;
21 21
22 ngx_flag_t prefer_server_ciphers; 22 ngx_flag_t prefer_server_ciphers;
23 ngx_flag_t early_data;
23 24
24 ngx_uint_t protocols; 25 ngx_uint_t protocols;
25 26
26 ngx_uint_t verify; 27 ngx_uint_t verify;
27 ngx_uint_t verify_depth; 28 ngx_uint_t verify_depth;