]> git.kaiwu.me - nginx.git/commit
QUIC: the "quic_host_key" directive.
authorVladimir Homutov <vl@nginx.com>
Mon, 8 Feb 2021 13:49:33 +0000 (16:49 +0300)
committerVladimir Homutov <vl@nginx.com>
Mon, 8 Feb 2021 13:49:33 +0000 (16:49 +0300)
commiteab61bfc22b583031b5a6f42f9c277223ce18672
tree665e150d9665600dd5b8280c7ec24501ba40bb4f
parent040a23bfc316403fa374e55ce52de70ace3cff38
QUIC: the "quic_host_key" directive.

The token generation in QUIC is reworked. Single host key is used to generate
all required keys of needed sizes using HKDF.

The "quic_stateless_reset_token_key" directive is removed.  Instead, the
"quic_host_key" directive is used, which reads key from file, or sets it
to random bytes if not specified.
src/event/quic/ngx_event_quic.c
src/event/quic/ngx_event_quic.h
src/event/quic/ngx_event_quic_protection.c
src/event/quic/ngx_event_quic_protection.h
src/http/modules/ngx_http_quic_module.c
src/stream/ngx_stream_quic_module.c