0001-Also-try-to-set-TLSv1.3-ciphers.patch

From: msg7086 <i@7086.in>
Date: Sun, 8 Apr 2018 22:22:22 -0400
Subject: [PATCH] Also try to set TLSv1.3 ciphers

---

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
index 88a6dbe..5ac0ec6 100644
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -640,6 +640,10 @@ ngx_ssl_ciphers(ngx_conf_t *cf, ngx_ssl_t *ssl, ngx_str_t *ciphers,
         return NGX_ERROR;
     }
 
+#if (OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined LIBRESSL_VERSION_NUMBER)
+    SSL_CTX_set_ciphersuites(ssl->ctx, (char *) ciphers->data);
+#endif
+
     if (prefer_server_ciphers) {
         SSL_CTX_set_options(ssl->ctx, SSL_OP_CIPHER_SERVER_PREFERENCE);
     }
-- 
2.15.0