NGINX 1.19.4 Mainline Release: New SSL Directives and Configuration Examples

NGINX 1.19.4 mainline version has been released, introducing several new SSL‑related directives and other features.

Feature: added "ssl_conf_command", "proxy_ssl_conf_command", "grpc_ssl_conf_command" and "uwsgi_ssl_conf_command".

Feature: added "ssl_reject_handshake" directive.

Feature: mail proxy added "proxy_smtp_auth" directive.

The ssl_reject_handshake directive, available in the ngx_http_ssl_module, can be set to on or off (default off) and, when enabled, forces the server block to reject SSL handshakes.

Syntax:    ssl_reject_handshake on | off;
Default:    ssl_reject_handshake off;
Context:   http, server

Example configuration shows how to reject SSL handshakes for all server names except example.com:

server {
    listen               443 ssl;
    ssl_reject_handshake on;
}

server {
    listen              443 ssl;
    server_name         example.com;
    ssl_certificate     example.com.crt;
    ssl_certificate_key example.com.key;
}