]> git.kaiwu.me - nginx.git/commitdiff
QUIC: fixed expected TLS codepoint with final draft and BoringSSL.
authorSergey Kandaurov <pluknet@nginx.com>
Tue, 16 Mar 2021 10:48:28 +0000 (13:48 +0300)
committerSergey Kandaurov <pluknet@nginx.com>
Tue, 16 Mar 2021 10:48:28 +0000 (13:48 +0300)
A reasonable codepoint is always set[1] explicitly so that it doesn't
depend on the default library value that may change[2] in the future.

[1] https://boringssl.googlesource.com/boringssl/+/3d8b8c3d
[2] https://boringssl.googlesource.com/boringssl/+/c47bfce0

src/event/quic/ngx_event_quic.c

index 1cb9e276ce1d07747fc92afd5b072cf26b69b6d7..cb6aff3fbc04f0a00320150d721a16cf5b959853 100644 (file)
@@ -1803,6 +1803,10 @@ ngx_quic_init_connection(ngx_connection_t *c)
     }
 #endif
 
+#if BORINGSSL_API_VERSION >= 13
+    SSL_set_quic_use_legacy_codepoint(ssl_conn, qc->version != 1);
+#endif
+
     if (ngx_quic_new_sr_token(c, &qc->dcid, qc->conf->sr_token_key,
                               qc->tp.sr_token)
         != NGX_OK)