Commit 9a37eb3a62130473596e0e4c2e388d80bdb14956 - nginx

SSL: added support for TLSv1.3 in ssl_protocols directive. Support for the TLSv1.3 protocol will be introduced in OpenSSL 1.1.1. Sergey Kandaurov 5 years ago

8 changed file(s) with 13 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all

-0

src/event/ngx_event_openssl.c less more

320	320	SSL_CTX_clear_options(ssl->ctx, SSL_OP_NO_TLSv1_2);
321	321	if (!(protocols & NGX_SSL_TLSv1_2)) {
322	322	SSL_CTX_set_options(ssl->ctx, SSL_OP_NO_TLSv1_2);
	323	}
	324	#endif
	325	#ifdef SSL_OP_NO_TLSv1_3
	326	SSL_CTX_clear_options(ssl->ctx, SSL_OP_NO_TLSv1_3);
	327	if (!(protocols & NGX_SSL_TLSv1_3)) {
	328	SSL_CTX_set_options(ssl->ctx, SSL_OP_NO_TLSv1_3);
323	329	}
324	330	#endif
325	331

-0

src/event/ngx_event_openssl.h less more

130	130	#define NGX_SSL_TLSv1 0x0008
131	131	#define NGX_SSL_TLSv1_1 0x0010
132	132	#define NGX_SSL_TLSv1_2 0x0020
	133	#define NGX_SSL_TLSv1_3 0x0040
133	134
134	135
135	136	#define NGX_SSL_BUFFER 1

-0

src/http/modules/ngx_http_proxy_module.c less more

234	234	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
235	235	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
236	236	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	237	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
237	238	{ ngx_null_string, 0 }
238	239	};
239	240

-0

src/http/modules/ngx_http_ssl_module.c less more

56	56	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
57	57	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
58	58	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	59	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
59	60	{ ngx_null_string, 0 }
60	61	};
61	62

-0

src/http/modules/ngx_http_uwsgi_module.c less more

128	128	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
129	129	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
130	130	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	131	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
131	132	{ ngx_null_string, 0 }
132	133	};
133	134

-0

src/mail/ngx_mail_ssl_module.c less more

41	41	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
42	42	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
43	43	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	44	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
44	45	{ ngx_null_string, 0 }
45	46	};
46	47

-0

src/stream/ngx_stream_proxy_module.c less more

102	102	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
103	103	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
104	104	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	105	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
105	106	{ ngx_null_string, 0 }
106	107	};
107	108

-0

src/stream/ngx_stream_ssl_module.c less more

44	44	{ ngx_string("TLSv1"), NGX_SSL_TLSv1 },
45	45	{ ngx_string("TLSv1.1"), NGX_SSL_TLSv1_1 },
46	46	{ ngx_string("TLSv1.2"), NGX_SSL_TLSv1_2 },
	47	{ ngx_string("TLSv1.3"), NGX_SSL_TLSv1_3 },
47	48	{ ngx_null_string, 0 }
48	49	};
49	50