update reference.json

Author: ryepup

reference-lib/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@nginx/reference-lib",
-  "version": "1.1.24",
+  "version": "1.1.25",
   "description": "",
   "main": "dist/index.js",
   "type": "module",

reference-lib/package.json

@@ -9929,6 +9929,23 @@
           "description_md": "Specifies a *`curve`* for ECDHE ciphers.\n\nWhen using OpenSSL 1.0.2 or higher,\nit is possible to specify multiple curves (1.11.0), for example:\n```\nssl_ecdh_curve prime256v1:secp384r1;\n```\n\nThe special value `auto` (1.11.0) instructs nginx to use\na list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,\nor `prime256v1` with older versions.\n\n> Prior to version 1.11.0,\n> the `prime256v1` curve was used by default.\n\n> When using OpenSSL 1.0.2 or higher,\n> this directive sets the list of curves supported by the server.\n> Thus, in order for ECDSA certificates to work,\n> it is important to include the curves used in the certificates.",
           "description_html": "<p>Specifies a <em><code>curve</code></em> for ECDHE ciphers.</p>\n\n<p>When using OpenSSL 1.0.2 or higher,\nit is possible to specify multiple curves (1.11.0), for example:</p>\n\n<pre><code>ssl_ecdh_curve prime256v1:secp384r1;\n</code></pre>\n\n<p>The special value <code>auto</code> (1.11.0) instructs nginx to use\na list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,\nor <code>prime256v1</code> with older versions.</p>\n\n<blockquote>\n<p>Prior to version 1.11.0,\nthe <code>prime256v1</code> curve was used by default.</p>\n\n<p>When using OpenSSL 1.0.2 or higher,\nthis directive sets the list of curves supported by the server.\nThus, in order for ECDSA certificates to work,\nit is important to include the curves used in the certificates.</p>\n</blockquote>\n"
         },
+        {
+          "name": "ssl_ech_file",
+          "default": "",
+          "contexts": [
+            "http",
+            "server"
+          ],
+          "syntax_md": [
+            "*`file`*"
+          ],
+          "syntax_html": [
+            "<p><em><code>file</code></em></p>\n"
+          ],
+          "isBlock": false,
+          "description_md": "Specifies a *`file`* with encrypted ClientHello configuration\n(`ECHConfig`) in the\n[PEM](https://datatracker.ietf.org/doc/draft-farrell-tls-pemesni/)\nformat used to enable TLS 1.3\n[ECH](https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni)\nin shared mode.\n\n> The directive is currently supported only when using OpenSSL\n> [ECH feature branch](https://github.com/openssl/openssl/tree/feature/ech).",
+          "description_html": "<p>Specifies a <em><code>file</code></em> with encrypted ClientHello configuration\n(<code>ECHConfig</code>) in the\n<a href=\"https://datatracker.ietf.org/doc/draft-farrell-tls-pemesni/\" target=\"_blank\">PEM</a>\nformat used to enable TLS 1.3\n<a href=\"https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni\" target=\"_blank\">ECH</a>\nin shared mode.</p>\n\n<blockquote>\n<p>The directive is currently supported only when using OpenSSL\n<a href=\"https://github.com/openssl/openssl/tree/feature/ech\" target=\"_blank\">ECH feature branch</a>.</p>\n</blockquote>\n"
+        },
         {
           "name": "ssl_key_log",
           "default": "",
@@ -10354,6 +10371,16 @@
           "description_md": "returns “`1`” if\nTLS 1.3 [early data](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data) is used\nand the handshake is not complete, otherwise “” (1.15.3).",
           "description_html": "<p>returns “<code>1</code>” if\nTLS 1.3 <a href=\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data\" target=\"_blank\">early data</a> is used\nand the handshake is not complete, otherwise “” (1.15.3).</p>\n"
         },
+        {
+          "name": "$ssl_ech_outer_server_name",
+          "description_md": "returns the public server name requested through\n[SNI](http://en.wikipedia.org/wiki/Server_Name_Indication)\nif TLS 1.3 [ECH](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ech_file) was accepted,\notherwise “” (1.29.4);",
+          "description_html": "<p>returns the public server name requested through\n<a href=\"http://en.wikipedia.org/wiki/Server_Name_Indication\" target=\"_blank\">SNI</a>\nif TLS 1.3 <a href=\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ech_file\" target=\"_blank\">ECH</a> was accepted,\notherwise “” (1.29.4);</p>\n"
+        },
+        {
+          "name": "$ssl_ech_status",
+          "description_md": "returns the result of TLS 1.3 [ECH](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ech_file) processing:\n“`FAILED`”,\n“`BACKEND`”,\n“`GREASE`”,\n“`SUCCESS`”, or\n“`NOT_TRIED`” (1.29.4);\n> The variable is currently supported only when using OpenSSL\n> [ECH feature branch](https://github.com/openssl/openssl/tree/feature/ech)\n> and is therefore subject to change.\n> The variable value will otherwise be an empty string.",
+          "description_html": "<p>returns the result of TLS 1.3 <a href=\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ech_file\" target=\"_blank\">ECH</a> processing:\n“<code>FAILED</code>”,\n“<code>BACKEND</code>”,\n“<code>GREASE</code>”,\n“<code>SUCCESS</code>”, or\n“<code>NOT_TRIED</code>” (1.29.4);</p>\n\n<blockquote>\n<p>The variable is currently supported only when using OpenSSL\n<a href=\"https://github.com/openssl/openssl/tree/feature/ech\" target=\"_blank\">ECH feature branch</a>\nand is therefore subject to change.\nThe variable value will otherwise be an empty string.</p>\n</blockquote>\n"
+        },
         {
           "name": "$ssl_protocol",
           "description_md": "returns the protocol of an established SSL connection;",
@@ -17053,6 +17080,23 @@
           "description_md": "Specifies a *`curve`* for ECDHE ciphers.\n\nWhen using OpenSSL 1.0.2 or higher,\nit is possible to specify multiple curves (1.11.0), for example:\n```\nssl_ecdh_curve prime256v1:secp384r1;\n```\n\nThe special value `auto` (1.11.0) instructs nginx to use\na list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,\nor `prime256v1` with older versions.\n\n> Prior to version 1.11.0,\n> the `prime256v1` curve was used by default.\n\n> When using OpenSSL 1.0.2 or higher,\n> this directive sets the list of curves supported by the server.\n> Thus, in order for ECDSA certificates to work,\n> it is important to include the curves used in the certificates.",
           "description_html": "<p>Specifies a <em><code>curve</code></em> for ECDHE ciphers.</p>\n\n<p>When using OpenSSL 1.0.2 or higher,\nit is possible to specify multiple curves (1.11.0), for example:</p>\n\n<pre><code>ssl_ecdh_curve prime256v1:secp384r1;\n</code></pre>\n\n<p>The special value <code>auto</code> (1.11.0) instructs nginx to use\na list built into the OpenSSL library when using OpenSSL 1.0.2 or higher,\nor <code>prime256v1</code> with older versions.</p>\n\n<blockquote>\n<p>Prior to version 1.11.0,\nthe <code>prime256v1</code> curve was used by default.</p>\n\n<p>When using OpenSSL 1.0.2 or higher,\nthis directive sets the list of curves supported by the server.\nThus, in order for ECDSA certificates to work,\nit is important to include the curves used in the certificates.</p>\n</blockquote>\n"
         },
+        {
+          "name": "ssl_ech_file",
+          "default": "",
+          "contexts": [
+            "stream",
+            "server"
+          ],
+          "syntax_md": [
+            "*`file`*"
+          ],
+          "syntax_html": [
+            "<p><em><code>file</code></em></p>\n"
+          ],
+          "isBlock": false,
+          "description_md": "Specifies a *`file`* with encrypted ClientHello configuration\n(`ECHConfig`) in the\n[PEM](https://datatracker.ietf.org/doc/draft-farrell-tls-pemesni/)\nformat used to enable TLS 1.3\n[ECH](https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni)\nin shared mode.\n\n> The directive is currently supported only when using OpenSSL\n> [ECH feature branch](https://github.com/openssl/openssl/tree/feature/ech).",
+          "description_html": "<p>Specifies a <em><code>file</code></em> with encrypted ClientHello configuration\n(<code>ECHConfig</code>) in the\n<a href=\"https://datatracker.ietf.org/doc/draft-farrell-tls-pemesni/\" target=\"_blank\">PEM</a>\nformat used to enable TLS 1.3\n<a href=\"https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni\" target=\"_blank\">ECH</a>\nin shared mode.</p>\n\n<blockquote>\n<p>The directive is currently supported only when using OpenSSL\n<a href=\"https://github.com/openssl/openssl/tree/feature/ech\" target=\"_blank\">ECH feature branch</a>.</p>\n</blockquote>\n"
+        },
         {
           "name": "ssl_handshake_timeout",
           "default": "60s",
@@ -17475,6 +17519,16 @@
           "description_md": "returns the list of curves supported by the client (1.11.7).\nKnown curves are listed by names, unknown are shown in hexadecimal,\nfor example:\n```\n0x001d:prime256v1:secp521r1:secp384r1\n```\n> The variable is supported only when using OpenSSL version 1.0.2 or higher.\n> With older versions, the variable value will be an empty string.\n\n> The variable is available only for new sessions.",
           "description_html": "<p>returns the list of curves supported by the client (1.11.7).\nKnown curves are listed by names, unknown are shown in hexadecimal,\nfor example:</p>\n\n<pre><code>0x001d:prime256v1:secp521r1:secp384r1\n</code></pre>\n\n<blockquote>\n<p>The variable is supported only when using OpenSSL version 1.0.2 or higher.\nWith older versions, the variable value will be an empty string.</p>\n\n<p>The variable is available only for new sessions.</p>\n</blockquote>\n"
         },
+        {
+          "name": "$ssl_ech_outer_server_name",
+          "description_md": "returns the public server name requested through\n[SNI](http://en.wikipedia.org/wiki/Server_Name_Indication)\nif TLS 1.3 [ECH](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ech_file) was accepted,\notherwise “” (1.29.4);",
+          "description_html": "<p>returns the public server name requested through\n<a href=\"http://en.wikipedia.org/wiki/Server_Name_Indication\" target=\"_blank\">SNI</a>\nif TLS 1.3 <a href=\"https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ech_file\" target=\"_blank\">ECH</a> was accepted,\notherwise “” (1.29.4);</p>\n"
+        },
+        {
+          "name": "$ssl_ech_status",
+          "description_md": "returns the result of TLS 1.3 [ECH](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ech_file) processing:\n“`FAILED`”,\n“`BACKEND`”,\n“`GREASE`”,\n“`SUCCESS`”, or\n“`NOT_TRIED`” (1.29.4);\n> The variable is currently supported only when using OpenSSL\n> [ECH feature branch](https://github.com/openssl/openssl/tree/feature/ech)\n> and is therefore subject to change.\n> The variable value will otherwise be an empty string.",
+          "description_html": "<p>returns the result of TLS 1.3 <a href=\"https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ech_file\" target=\"_blank\">ECH</a> processing:\n“<code>FAILED</code>”,\n“<code>BACKEND</code>”,\n“<code>GREASE</code>”,\n“<code>SUCCESS</code>”, or\n“<code>NOT_TRIED</code>” (1.29.4);</p>\n\n<blockquote>\n<p>The variable is currently supported only when using OpenSSL\n<a href=\"https://github.com/openssl/openssl/tree/feature/ech\" target=\"_blank\">ECH feature branch</a>\nand is therefore subject to change.\nThe variable value will otherwise be an empty string.</p>\n</blockquote>\n"
+        },
         {
           "name": "$ssl_protocol",
           "description_md": "returns the protocol of an established SSL connection;",
@@ -18162,5 +18216,5 @@
       ]
     }
   ],
-  "version": "https://github.com/nginx/nginx.org/commit/fd2e4792287dc0c4e167a7242dd7c56a38d44e3b"
+  "version": "https://github.com/nginx/nginx.org/commit/6f4ecaa67f764bb295a532dadb2a89b658683c5a"
 }