Nginx Nginx 1.15.3 mainline version has been released

thanks for heads up https://nginx.org/en/CHANGES

Looking good with Centmin Mod 123.09beta01 + BoringSSL with TLS 1.3 Early Data (0-RTT)

BoringSSL with TLS 1.3 Early Data (0-RTT) test via BoringSSL bssl client

Code (Text):

bssl client -connect domain.com:443 -test-resumption -early-data https.txt
Connecting to IPADDR:443
Connected.
  Version: TLSv1.3
  Resumed session: no
  Cipher: TLS_AES_128_GCM_SHA256
  ECDHE curve: X25519
  Signature algorithm: ecdsa_secp256r1_sha256
  Secure renegotiation: yes
  Extended master secret: yes
  Next protocol negotiated:
  ALPN protocol:
  OCSP staple: no
  SCT list: no
  Early data: no
  Cert subject: CN = domain.com
  Cert issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Connecting to IPADDR:443
Connected.
  Version: TLSv1.3
  Resumed session: yes
  Cipher: TLS_AES_128_GCM_SHA256
  ECDHE curve: X25519
  Signature algorithm: ecdsa_secp256r1_sha256
  Secure renegotiation: no
  Extended master secret: no
  Next protocol negotiated:
  ALPN protocol:
  OCSP staple: no
  SCT list: no
  Early data: yes
  Cert subject: CN = domain.com
  Cert issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

All we need is OpenSSL 1.1.1 TLS 1.3 0-RTT - guess Nginx 1.15.4 will be the one

 

For folks wanting to try out Centmin Mod Nginx with BoringSSL enabeld TLS 1.3 Nginx - Enabling BoringSSL TLS v1.3 with Centmin Mod Nginx HTTP/2 HTTPS Server