Hakase/nginx-build
2
1 Fork 1
Code Issues Pull Requests Releases Activity

Compare commits

base: Hakase/nginx-build:faff3eca8957a6855d101f23498dc797ba9f2f5f
Branches Tags
Hakase/nginx-build:master
...
compare: Hakase/nginx-build:60e3dc12e0d754a345048cffeba8ab8f0f68eab7
Branches Tags
Hakase/nginx-build:master
2 Commits
faff3eca89 ... 60e3dc12e0
Author SHA1 Message Date
Hakase 60e3dc12e0 Fix nginx.conf settings. 2018-10-13 14:46:25 +09:00
Hakase fd3f8b9369 Add TLS clock skew send. 2018-10-13 14:46:11 +09:00
2 changed files with 9 additions and 3 deletions
Expand all files Collapse all files
conf/nginx.conf
+5 -3
View File
@@ -52,12 +52,14 @@ http {
real_ip_header CF-Connecting-IP; real_ip_header CF-Connecting-IP;
# SSL Config # SSL Config
strict_sni on; ## Strict SNI must use fake server.
strict_sni_header on; strict_sni off;
## Strict SNI Header must use 'strict_sni'.
strict_sni_header off;
ssl_dyn_rec_enable on; ssl_dyn_rec_enable on;
ssl_early_data on; ssl_early_data on;
## SSL OCSP Stapling # SSL OCSP Stapling
resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off; resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
resolver_timeout 15s; resolver_timeout 15s;
ssl_stapling on; ssl_stapling on;
src/event/ngx_event_openssl.c
+4
View File
@@ -370,6 +370,10 @@ ngx_ssl_create(ngx_ssl_t *ssl, ngx_uint_t protocols, void *data)
SSL_CTX_set_mode(ssl->ctx, SSL_MODE_NO_AUTO_CHAIN); SSL_CTX_set_mode(ssl->ctx, SSL_MODE_NO_AUTO_CHAIN);
#endif #endif
#ifdef SSL_MODE_SEND_SERVERHELLO_TIME
SSL_CTX_set_mode(ssl->ctx, SSL_MODE_SEND_SERVERHELLO_TIME);
#endif
SSL_CTX_set_read_ahead(ssl->ctx, 1); SSL_CTX_set_read_ahead(ssl->ctx, 1);
SSL_CTX_set_info_callback(ssl->ctx, ngx_ssl_info_callback); SSL_CTX_set_info_callback(ssl->ctx, ngx_ssl_info_callback);