Support for TLS extended master secret extension
mdounin at mdounin.ru
Thu Mar 2 01:49:49 UTC 2017
On Wed, Mar 01, 2017 at 05:30:49PM -0800, Santosh Mahapatra wrote:
> Does nginx support TLS extended master secret extension(RFC 7627:
> https://tools.ietf.org/html/rfc7627 )?
> If so what directive is available to enable or disable it?
OpenSSL supports Extended Master Secret extension starting with
OpenSSL 1.1.0, and there is no way to disable it. So in nginx
you'll see Extended Master Secret extension supported once you are
running nginx with OpenSSL 1.1.0 or later.
More information about the nginx