"--with-openssl-opt=enable-tls1_3" option is missed in the configure of nginx

[iz8mbw]

trafficstars

More then an "issue" this is a question. Reading the file https://github.com/nginx-modules/docker-nginx-boringssl/blob/master/mainline/alpine/Dockerfile in the parameters for configure of ngnix the --with-openssl-opt=enable-tls1_3 is missed. Is it OK build nginx without --with-openssl-opt=enable-tls1_3? In nginx the TLS 1.3 will works also if the option --with-openssl-opt=enable-tls1_3 is missed?

Thanks.

[denji]

• https://github.com/nginx-modules/docker-nginx-boringssl/blob/master/mainline/alpine/Dockerfile#L116-L118
• https://boringssl.googlesource.com/boringssl/+log/master/ssl/ssl_lib.cc

[andyone]

@denji It doesn't work with latest versions of BoringSSL.

[denji]

@andyone Resolved problem d33d2fd & nginx-modules/libbrotli@79c8555

[xetorixik]

@andyone found a solution to enable TLS 1.3 for the latest BoringSSL at https://github.com/cloudflare/sslconfig/issues/87#issuecomment-380125243