<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Thanks for your advice.</div><div>I get early data when I configure nginx ssl_early_data on.</div><div>But I only get early data for get method.</div><div>When using post method, the server terminate connection. Is it related with openssl? If so, how can I do to allow post method?</div><div><br></div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><div style="font-size:85%;color:#575757" dir="auto">Sent from my Samsung Galaxy smartphone.</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Michael Wojcik <Michael.Wojcik@microfocus.com> </div><div>Date: 29/12/2018 12:46 a.m. (GMT+06:30) </div><div>To: openssl-users@openssl.org </div><div>Subject: Re: [openssl-users] How can I compile nginx with openssl to support 0-rtt TLS1.3 </div><div><br></div></div>> From: openssl-users [mailto:openssl-users-bounces@openssl.org] On Behalf Of ???????? ????<br>> Sent: Friday, December 28, 2018 00:25<br><br>> I have an nginx web server compiled with openssl that support TLS 1.3.<br><br>What version of OpenSSL? Is it 1.1.1? The final version or an early release? Or 1.1.0, and if so, which letter release?<br><br>> But when I test with firefox Nightly browser, it does not send early data together with<br>> client hello packet.<br><br>This sounds like an nginx or Firefox question. I haven't experimented with 0-RTT, which I think was a bad idea in TLSv1.3 and have no interest in enabling in my applications; but as I understand it, you have to set some options in the SSL structure (or the SSL_CTX you use to create it) in order to enable 0-RTT. That means nginx will have to make the necessary OpenSSL API calls. It may not have support for that yet, or in whatever version of nginx you're running.<br><br>It's also possible that there's some issue with the Firefox build you're running and its 0-RTT support. My suspicion though is that nginx is not enabling 0-RTT in nginx.<br><br>--<br>Michael Wojcik<br>Distinguished Engineer, Micro Focus<br><br><br><br><br>-- <br>openssl-users mailing list<br>To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users<br></body></html>