2 ms·
Does anyone know if nginx will support TLSv1.3 automatically if you recompile it with 1.1.1?
by rmdoss 8y ago
Does anyone know if nginx will support TLSv1.3 automatically if you recompile it with 1.1.1?
- Asseon 8y agoIf your nginx version is 1.13 or newer than yes, that should be enough. [0] http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_p...
- vbtechguy 8y agoAlready supported in Nginx 1.15.3+ if you recompile with either OpenSSL 1.1.1 or BoringSSL I have no problems for - Nginx + BoringSSL https://community.centminmod.com/threads/enabling-boringssl-tls-v1-3-with-centmin-mod-nginx-http-2-https-server.15527/ https://community.centminmod.com/threads/enabling-boringssl-... - Nginx + OpenSSL 1.1.1 https://community.centminmod.com/threads/openssl-1-1-1-released-with-tls-1-3-support.15592/ https://community.centminmod.com/threads/openssl-1-1-1-relea... 0-RTT TLS 1.3 is only supported in Nginx 1.15.3 with BoringSSL right now via ssl_early_data Nginx directive. Nginx will add full 0-RTT TLS 1.3 for OpenSSL 1.1.1 with Nginx 1.15.4+ according to their road map https://trac.nginx.org/nginx/roadmap https://trac.nginx.org/nginx/roadmap