]> git.kaiwu.me - nginx.git/commit
QUIC: generate default stateless reset token key.
authorRoman Arutyunyan <arut@nginx.com>
Wed, 11 Nov 2020 21:08:48 +0000 (21:08 +0000)
committerRoman Arutyunyan <arut@nginx.com>
Wed, 11 Nov 2020 21:08:48 +0000 (21:08 +0000)
commit5bbc3f1967a8ac1cce0f16b428f156301b81beb9
tree378446c5e1deba2e053a084803b732190c9e5075
parent6e6daf459234f0f7330c69de1f27d0064bb217ae
QUIC: generate default stateless reset token key.

Previously, if quic_stateless_reset_token_key was empty or unspecified,
initial stateless reset token was not generated.  However subsequent tokens
were generated with empty key, which resulted in error with certain SSL
libraries, for example OpenSSL.

Now a random 32-byte stateless reset token key is generated if none is
specified in the configuration.  As a result, stateless reset tokens are now
generated for all server ids.
src/event/ngx_event_quic.c
src/event/ngx_event_quic.h
src/event/ngx_event_quic_transport.c
src/http/modules/ngx_http_quic_module.c
src/stream/ngx_stream_quic_module.c