--- a/xml/en/docs/http/ngx_http_ssl_module.xml	Tue Jan 25 15:38:14 2022 +0000
+++ b/xml/en/docs/http/ngx_http_ssl_module.xml	Wed Jan 26 16:26:47 2022 +0300
@@ -380,10 +380,10 @@
 
 <para>
 Enables or disables TLS 1.3
-<link url="https://tools.ietf.org/html/rfc8446#section-2.3">early data</link>.
+<link url="https://datatracker.ietf.org/doc/html/rfc8446#section-2.3">early data</link>.
 <note>
 Requests sent within early data are subject to
-<link url="https://tools.ietf.org/html/rfc8470">replay attacks</link>.
+<link url="https://datatracker.ietf.org/doc/html/rfc8470">replay attacks</link>.
 To protect against such attacks at the application layer,
 the <link id="var_ssl_early_data">$ssl_early_data</link> variable
 should be used.
@@ -518,7 +518,7 @@
 
 <para>
 Overrides the URL of the OCSP responder specified in the
-“<link url="https://tools.ietf.org/html/rfc5280#section-4.2.2.1">Authority
+“<link url="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.2.1">Authority
 Information Access</link>” certificate extension
 for <link id="ssl_ocsp">validation</link> of client certificates.
 </para>
@@ -754,7 +754,7 @@
 
 <para>
 Enables or disables session resumption through
-<link url="https://tools.ietf.org/html/rfc5077">TLS session tickets</link>.
+<link url="https://datatracker.ietf.org/doc/html/rfc5077">TLS session tickets</link>.
 </para>
 
 </directive>
@@ -783,7 +783,7 @@
 
 <para>
 Enables or disables
-<link url="https://tools.ietf.org/html/rfc6066#section-8">stapling
+<link url="https://datatracker.ietf.org/doc/html/rfc6066#section-8">stapling
 of OCSP responses</link> by the server.
 Example:
 <example>
@@ -841,7 +841,7 @@
 
 <para>
 Overrides the URL of the OCSP responder specified in the
-“<link url="https://tools.ietf.org/html/rfc5280#section-4.2.2.1">Authority
+“<link url="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.2.1">Authority
 Information Access</link>” certificate extension.
 </para>
 
@@ -1042,7 +1042,7 @@
 <tag-desc>
 returns the “issuer DN” string of the client certificate
 for an established SSL connection according to
-<link url="https://tools.ietf.org/html/rfc2253">RFC 2253</link> (1.11.6);
+<link url="https://datatracker.ietf.org/doc/html/rfc2253">RFC 2253</link> (1.11.6);
 </tag-desc>
 
 <tag-name id="var_ssl_client_i_dn_legacy"><var>$ssl_client_i_dn_legacy</var></tag-name>
@@ -1065,7 +1065,7 @@
 <tag-desc>
 returns the “subject DN” string of the client certificate
 for an established SSL connection according to
-<link url="https://tools.ietf.org/html/rfc2253">RFC 2253</link> (1.11.6);
+<link url="https://datatracker.ietf.org/doc/html/rfc2253">RFC 2253</link> (1.11.6);
 </tag-desc>
 
 <tag-name id="var_ssl_client_s_dn_legacy"><var>$ssl_client_s_dn_legacy</var></tag-name>