Support for TLS extended master secret extension

[Maxim Dounin]

Hello!

On Wed, Mar 01, 2017 at 05:30:49PM -0800, Santosh Mahapatra wrote:

> Does nginx support TLS extended master secret extension(RFC 7627:
> https://tools.ietf.org/html/rfc7627  )?
> 
> If so what directive is available to enable or disable it?

OpenSSL supports Extended Master Secret extension starting with 
OpenSSL 1.1.0, and there is no way to disable it.  So in nginx 
you'll see Extended Master Secret extension supported once you are 
running nginx with OpenSSL 1.1.0 or later.

-- 
Maxim Dounin
http://nginx.org/