diff options
author | Sergey Kandaurov <pluknet@nginx.com> | 2020-12-21 15:05:43 +0300 |
---|---|---|
committer | Sergey Kandaurov <pluknet@nginx.com> | 2020-12-21 15:05:43 +0300 |
commit | 2bc8ee653517f61c047d3519d451fbc718a6313d (patch) | |
tree | 5236eae7e266195d6babdf5e41bacd9d266429ae /src | |
parent | 405b9be899fe9bb10ad910bfe10a2fb7cae9a846 (diff) | |
download | nginx-2bc8ee653517f61c047d3519d451fbc718a6313d.tar.gz nginx-2bc8ee653517f61c047d3519d451fbc718a6313d.zip |
QUIC: converted to SSL_CIPHER_get_protocol_id().
This API is available in BoringSSL for quite some time:
https://boringssl.googlesource.com/boringssl/+/3743aaf
Diffstat (limited to 'src')
-rw-r--r-- | src/event/ngx_event_quic_protection.c | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/src/event/ngx_event_quic_protection.c b/src/event/ngx_event_quic_protection.c index db9068d69..401b71121 100644 --- a/src/event/ngx_event_quic_protection.c +++ b/src/event/ngx_event_quic_protection.c @@ -655,11 +655,7 @@ int ngx_quic_keys_set_encryption_secret(ngx_pool_t *pool, ngx_uint_t is_write, peer_secret = is_write ? &keys->secrets[level].server : &keys->secrets[level].client; - /* - * SSL_CIPHER_get_protocol_id() is not universally available, - * casting to uint16_t works for both OpenSSL and BoringSSL - */ - keys->cipher = (uint16_t) SSL_CIPHER_get_id(cipher); + keys->cipher = SSL_CIPHER_get_protocol_id(cipher); key_len = ngx_quic_ciphers(keys->cipher, &ciphers, level); |