基于TLS1.3实现国密双证书支持，支持SM2ECDH密钥协商（新增扩展字段），QUIC增加商密支持，njet客户端增加命令行启用 · Pull Request !8 · OpenNJet/OpenNJet

NJet配置如下：

server {
        listen 8443 quic reuseport;
        listen 8443 ssl;

ssl_protocols TLSv1.3;
        ssl_certificate     certs/rsa.cer;
        ssl_certificate_key certs/rsa.pem;

location / {
           root html;
        }
    }

server {
        listen 8444 quic reuseport;
        listen 8444 ssl;

ssl_protocols TLSv1.3;
        ssl_certificate     sign:certs/server_sign.cer;
        ssl_certificate_key sign:certs/server_sign.pem;
        ssl_certificate     enc:certs/server_enc.cer;
        ssl_certificate_key enc:certs/server_enc.pem;

location / {
           root html;
        }
    }

server {
        listen       80;
        server_name  localhost;

location / {
            root   html;
            index  index.html index.htm;

proxy_ssl_protocols TLSv1.3;
            proxy_http_version 3;
            proxy_tls13_sm_ecdh on;
            proxy_ssl_conf_command Ciphersuites TLS_SM2ECDH_SM4_GCM_SM3;

proxy_pass https://127.0.0.1:8444;
        }
    }
    
    server {
        listen       82;
        server_name  localhost;

location / {
            root   html;
            index  index.html index.htm;

proxy_ssl_protocols TLSv1.3;
            proxy_http_version 3;

proxy_pass https://127.0.0.1:8443;
        }
    }

类型	指派人员	状态
审查	zhaoygf 已审查通过	已完成 (1/1人)
测试	zhaoygf 已测试通过	已完成 (1/1人)

GVPOpenNJet/OpenNJet

搜索帮助

GVP OpenNJet/OpenNJet