Support for TLS extended master secret extension

Maxim Dounin mdounin at
Thu Mar 2 01:49:49 UTC 2017


On Wed, Mar 01, 2017 at 05:30:49PM -0800, Santosh Mahapatra wrote:

> Does nginx support TLS extended master secret extension(RFC 7627:
>  )?
> If so what directive is available to enable or disable it?

OpenSSL supports Extended Master Secret extension starting with 
OpenSSL 1.1.0, and there is no way to disable it.  So in nginx 
you'll see Extended Master Secret extension supported once you are 
running nginx with OpenSSL 1.1.0 or later.

Maxim Dounin

More information about the nginx mailing list