Fix nginx.conf settings.

conf/nginx.conf

@@ -52,12 +52,14 @@ http {
     real_ip_header     CF-Connecting-IP;
 
     # SSL Config
-    strict_sni on;
-    strict_sni_header on;
+    ## Strict SNI must use fake server.
+    strict_sni off;
+    ## Strict SNI Header must use 'strict_sni'.
+    strict_sni_header off;
     ssl_dyn_rec_enable on;
     ssl_early_data on;
 
-    ## SSL OCSP Stapling
+    # SSL OCSP Stapling
     resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
     resolver_timeout 15s;
     ssl_stapling on;

src/event/ngx_event_openssl.c

@@ -370,6 +370,10 @@ ngx_ssl_create(ngx_ssl_t *ssl, ngx_uint_t protocols, void *data)
     SSL_CTX_set_mode(ssl->ctx, SSL_MODE_NO_AUTO_CHAIN);
 #endif
 
+#ifdef SSL_MODE_SEND_SERVERHELLO_TIME
+    SSL_CTX_set_mode(ssl->ctx, SSL_MODE_SEND_SERVERHELLO_TIME);
+#endif
+
     SSL_CTX_set_read_ahead(ssl->ctx, 1);
 
     SSL_CTX_set_info_callback(ssl->ctx, ngx_ssl_info_callback);