diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2020-08-21 14:41:42 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2020-08-21 14:41:42 +0300 |
| commit | e153f4993c62e02f14da07fcf68d8c24ba189d3b (patch) | |
| tree | 7ce4c15140f2ed843bdeb8fc76d14e06a954ec59 /src | |
| parent | 6c089cda295fa05c9f3801aa7c69f717d8940788 (diff) | |
| download | nginx-e153f4993c62e02f14da07fcf68d8c24ba189d3b.tar.gz nginx-e153f4993c62e02f14da07fcf68d8c24ba189d3b.zip | |
QUIC: disabled bidirectional SSL shutdown after 09fb2135a589.
On QUIC connections, SSL_shutdown() is used to call the send_alert callback
to send a CONNECTION_CLOSE frame. The reverse side is handled by other means.
At least BoringSSL doesn't differentiate whether this is a QUIC SSL method,
so waiting for the peer's close_notify alert should be explicitly disabled.
Diffstat (limited to 'src')
| -rw-r--r-- | src/event/ngx_event_quic.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c index 7923c5529..918e8f716 100644 --- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -2918,6 +2918,7 @@ ngx_quic_crypto_input(ngx_connection_t *c, ngx_quic_frame_t *frame, void *data) "quic handshake completed successfully"); c->ssl->handshaked = 1; + c->ssl->no_wait_shutdown = 1; frame = ngx_quic_alloc_frame(c, 0); if (frame == NULL) { |