[PATCH] QUIC: removed TLSv1.3 requirement from README

[Roman Arutyunyan]

Hi,

On Mon, Apr 10, 2023 at 02:11:44PM -0700, Maxim Konovalov wrote:
> On 10.04.2023 04:47, Roman Arutyunyan wrote:
> > # HG changeset patch
> > # User Roman Arutyunyan <arut at nginx.com>
> > # Date 1681127095 -14400
> > #      Mon Apr 10 15:44:55 2023 +0400
> > # Branch quic
> > # Node ID b14b0c9887fbf22e24bd0d0449a261ced466f78c
> > # Parent  9ea62b6250f225578f703da5e230853a7a84df7d
> > QUIC: removed TLSv1.3 requirement from README.
> > 
> > TLSv1.3 is enabled by default since d1cf09451ae8.
> > 
> > diff --git a/README b/README
> > --- a/README
> > +++ b/README
> > @@ -119,10 +119,6 @@ 3. Configuration
> >           ssl_early_data on;
> > -    Make sure that TLS 1.3 is configured which is required for QUIC:
> > -
> > -        ssl_protocols TLSv1.3;
> > -
> >       To enable GSO (Generic Segmentation Offloading):
> [...]
> 
> Well, TLSv1.3 is still required.  You just don't need to add it to the list
> of ssl_protocols.  I would remove it from the config example but keep a note
> that QUIC relies on TLSv1.3.

We can keep a note, but I'd like to avoid the directive following the note.

--
Roman Arutyunyan
-------------- next part --------------
# HG changeset patch
# User Roman Arutyunyan <arut at nginx.com>
# Date 1681223360 -14400
#      Tue Apr 11 18:29:20 2023 +0400
# Branch quic
# Node ID 8347620e0e762c5dea99247dc70fbbffd0c6b175
# Parent  9ea62b6250f225578f703da5e230853a7a84df7d
README: revised TLSv1.3 requirement for QUIC.

TLSv1.3 is enabled by default since d1cf09451ae8.

diff --git a/README b/README
--- a/README
+++ b/README
@@ -119,10 +119,6 @@ 3. Configuration
 
         ssl_early_data on;
 
-    Make sure that TLS 1.3 is configured which is required for QUIC:
-
-        ssl_protocols TLSv1.3;
-
     To enable GSO (Generic Segmentation Offloading):
 
         quic_gso on;
@@ -135,6 +131,8 @@ 3. Configuration
 
         quic_host_key <filename>;
 
+    QUIC requires TLSv1.3 protocol, which is enabled by the default
+    by "ssl_protocols" directive.
 
     By default, GSO Linux-specific optimization [10] is disabled.
     Enable it in case a corresponding network interface is configured to
@@ -175,7 +173,6 @@ Example configuration:
 
             ssl_certificate     certs/example.com.crt;
             ssl_certificate_key certs/example.com.key;
-            ssl_protocols       TLSv1.3;
 
             location / {
                 # required for browsers to direct them into quic port