Hacker News new | ask | show | jobs
by rmdoss 2841 days ago
Does anyone know if nginx will support TLSv1.3 automatically if you recompile it with 1.1.1?
2 comments
Asseon 2841 days ago
If your nginx version is 1.13 or newer than yes, that should be enough.

[0] http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_p...

link
vbtechguy 2840 days ago
Already supported in Nginx 1.15.3+ if you recompile with either OpenSSL 1.1.1 or BoringSSL

I have no problems for

- Nginx + BoringSSL https://community.centminmod.com/threads/enabling-boringssl-...

- Nginx + OpenSSL 1.1.1 https://community.centminmod.com/threads/openssl-1-1-1-relea...

0-RTT TLS 1.3 is only supported in Nginx 1.15.3 with BoringSSL right now via ssl_early_data Nginx directive.

Nginx will add full 0-RTT TLS 1.3 for OpenSSL 1.1.1 with Nginx 1.15.4+ according to their road map https://trac.nginx.org/nginx/roadmap

link