Ah! Thank you very much. Recompiled with older openssl 1.1.1 pre2 since current browsers implement draft 23 atm. It's working now. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280017,280094#msg-280094