From 8257b0dabc0b683f7ddb018e6dd4d517062e726d Mon Sep 17 00:00:00 2001 From: Hakase Date: Sat, 22 Sep 2018 14:38:41 +0900 Subject: [PATCH] Fix max early data. BoringSSL specified max early data as 14336. in ssl/internal.h:2471 static const size_t kMaxEarlyDataAccepted = 14336; --- src/event/ngx_event_openssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index f919162..0ccc5a8 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -1207,7 +1207,7 @@ ngx_ssl_early_data(ngx_conf_t *cf, ngx_ssl_t *ssl, ngx_uint_t enable) /* OpenSSL */ - SSL_CTX_set_max_early_data(ssl->ctx, NGX_SSL_BUFSIZE); + SSL_CTX_set_max_early_data(ssl->ctx, 14336); #else ngx_log_error(NGX_LOG_WARN, ssl->log, 0,