| Author |
|
o6asan
Joined: 27 Aug 2015
Posts: 44
Location: Japan, Fukuoka
|
 Posted: Wed 24 Oct '18 4:34 Post subject: How can I use Early-Data Header? |
 |
|
Hi, I enabled TLSv1.3 on my server. Thanks for 2.4.37 release.
By the way, I added 'RequestHeader append Early-Data = "1"' to my ssl.conf and got 'AH00526: Syntax error' and 'Unknown parameter: 1'.
How can I use Early-Data Header or haven't Apache support "early-data" yet? I've not found about this information on Apache HTTP Server Documentation yet. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7442
Location: EU, Germany, Next to Hamburg
|
| Posted: Wed 24 Oct '18 17:24 Post subject: |
|
|
Don't use the equal sign
just
| Code: |
RequestHeader append Early-Data "1"
|
|
|
| Back to top |
|
o6asan
Joined: 27 Aug 2015
Posts: 44
Location: Japan, Fukuoka
|
| Posted: Thu 25 Oct '18 4:40 Post subject: |
|
|
Thank you, James.
The errors have gone.
But I have another question.
Before and after adding RequestHeader append Early-Data "1", I have the same message 'Early data was not sent' by 'openssl s_client ～'.
Do I need some other settings? |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7442
Location: EU, Germany, Next to Hamburg
|
| Posted: Thu 25 Oct '18 10:51 Post subject: |
|
|
RequestHeader is what it says it is. It adds it to the client.
I think you want to use
| Code: | | Header append Early-Data "1" |
|
|
| Back to top |
|
o6asan
Joined: 27 Aug 2015
Posts: 44
Location: Japan, Fukuoka
|
| Posted: Thu 25 Oct '18 15:19 Post subject: |
|
|
Oh, mistake.
Yes, not RequestHeader but Header. But I still have the same message.
I think Session Resumption does not work well. Do I need some settings about this?
| Quote: | SSLSessionTickets on
SSLSessionCache "shmcb:${SRVROOT}/logs/ssl_scache(512000)"
SSLSessionCacheTimeout 300
|
|
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7442
Location: EU, Germany, Next to Hamburg
|
| Posted: Tue 06 Nov '18 12:38 Post subject: |
|
|
| I haven looked into the code of mod_ssl, but I'm not sure is that module handles Early-Data. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7442
Location: EU, Germany, Next to Hamburg
|
| Posted: Wed 21 Nov '18 18:37 Post subject: |
|
|
| I looked into the code an bit further and apache does not support that at the moment. |
|
| Back to top |
|
long76
Joined: 28 Oct 2017
Posts: 10
|
| Posted: Thu 16 Apr '20 16:58 Post subject: |
|
|
| any updates? |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7442
Location: EU, Germany, Next to Hamburg
|
| Posted: Sat 25 Apr '20 8:24 Post subject: |
|
|
| Nope, still no change in the source code about that. |
|
| Back to top |
|
