| 1 | | Hi Team, wanted to get the list of TLS 1.2 and TLS 1.3 extensions that is being currently supported by nginx (version >=1.22.x). |
| | 1 | Hi Team, wanted to get the list of TLS 1.2 and TLS 1.3 extensions that is being currently supported by nginx (version >=1.22.x). |
| | 2 | Specifically looking for the below extensions. |
| | 3 | |
| | 4 | |
| | 5 | TLS 1.2 |
| | 6 | |
| | 7 | | signed_certificate_timestamp, or sct (0x0012) | [RFC6962] | |
| | 8 | | encrypt_then_mac (0x0016) | [RFC7366] | |
| | 9 | | status_request (0x0005) | [RFC6066] | |
| | 10 | | use_srtp (0x000E) | [RFC5764] | |
| | 11 | | padding (0x0015) | [RFC7685] | |
| | 12 | | record_size_limit (0x001C) | [RFC8449] | |
| | 13 | | trusted_ca_keys (0x0003) | [RFC6066] | |
| | 14 | | user_mapping (0x0006) | [RFC4681] | |
| | 15 | | srp (0x000C) | [RFC5054] | |
| | 16 | | status_request_v2 (0x0011) | [RFC6961] | |
| | 17 | | session_ticket (0x0023) | [RFC5077] [RFC8447]| |
| | 18 | |
| | 19 | |
| | 20 | TLS 1.3 |
| | 21 | |
| | 22 | |
| | 23 | | signed_certificate_timestamp | [RFC6962] | |
| | 24 | | status_request (0x0005) | [RFC6066] | |
| | 25 | | use_srtp (0x000E) | [RFC5764] | |
| | 26 | | padding (0x0015) | [RFC7685] | |
| | 27 | | record_size_limit (0x001C) | [RFC8449] | |
| | 28 | | pre_shared_key (0x0029) | [RFC8446] | |
| | 29 | | psk_key_exchange_modes (0x002D) | [RFC8446] | |
| | 30 | | certificate_authorities (0x002F) | [RFC8446] | |
| | 31 | | oid_filters (0x0030) | [RFC8446] | |
| | 32 | | post_handshake_auth (0x0031) | [RFC8446] | |
