Nginx 1.19.4 Mainline Release Introduces New Proxy SMTP Auth and SSL Handshake Rejection Features

nginx 1.19.4 mainline version has been released, adding several new directives.

Feature: mail proxy adds "proxy_smtp_auth" directive

Feature: new "ssl_conf_command", "proxy_ssl_conf_command", "grpc_ssl_conf_command" and "uwsgi_ssl_conf_command" directives

Feature: new "ssl_reject_handshake" directive

The ssl_reject_handshake directive, located in the ngx_http_ssl_module , when enabled, causes the server block to reject SSL handshakes.

Syntax: ssl_reject_handshake on | off; Default: ssl_reject_handshake off; Context: http, server

Example configuration that rejects SSL handshakes for all server names except example.com :

server {
    listen 443 ssl;
    ssl_reject_handshake on;
}

server {
    listen 443 ssl;
    server_name example.com;
    ssl_certificate example.com.crt;
    ssl_certificate_key example.com.key;
}