Commit Graph
1 Commits
Author SHA1 Message Date
Hakase 9ec0d25a8b Update nginx > 1.15.4 strict sni patch.
It only happens under certain circumstances.

    ssl_early_data on;
    There should be no SNI data. ex) http: // IP
    Connection of TLS 1.3 Supported Browsers

Error example)
/var/log/nginx/error.log
2018/10/06 22:46:21 [crit] 81400#81400: *11 SSL_read_early_data() failed (SSL: error:1422E0EA:SSL routines:final_server_name:callback failed) while SSL handshaking, client: 0.0.0.0, server: 0.0.0.0:443

Patch : https://github.com/hakasenyang/nginx-build/commit/e3932ebe24b3fc723d6cb041c52ae63876154df9#commitcomment-30796507

This patch is available for nginx 1.15.4 and later.
2018-10-06 23:01:11 +09:00