Hello!

On Wed, Mar 01, 2017 at 05:30:49PM -0800, Santosh Mahapatra wrote:

> Does nginx support TLS extended master secret extension(RFC 7627:
> https://tools.ietf.org/html/rfc7627 )?
>
> If so what directive is available to enable or disable it?

OpenSSL supports Extended Master Secret extension starting with
OpenSSL 1.1.0, and there is no way to disable it. So in nginx
you'll see Extended Master Secret extension supported once you are
running nginx with OpenSSL 1.1.0 or later.

--
Maxim Dounin
http://nginx.org/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx