]> git.kaiwu.me - nginx.git/commitdiff
QUIC: added quic_stateless_reset_token_key Stream directive.
authorRoman Arutyunyan <arut@nginx.com>
Wed, 11 Nov 2020 19:39:23 +0000 (19:39 +0000)
committerRoman Arutyunyan <arut@nginx.com>
Wed, 11 Nov 2020 19:39:23 +0000 (19:39 +0000)
A similar directive is already available in HTTP.

src/stream/ngx_stream_quic_module.c

index 49b1a6f855e7df868471c603a503921c665ae927..fc767e991e23800fdc525930578514d803ca2acf 100644 (file)
@@ -126,6 +126,13 @@ static ngx_command_t  ngx_stream_quic_commands[] = {
       offsetof(ngx_quic_conf_t, retry),
       NULL },
 
+    { ngx_string("quic_stateless_reset_token_key"),
+      NGX_STREAM_MAIN_CONF|NGX_STREAM_SRV_CONF|NGX_CONF_FLAG,
+      ngx_conf_set_str_slot,
+      NGX_STREAM_SRV_CONF_OFFSET,
+      offsetof(ngx_quic_conf_t, sr_token_key),
+      NULL },
+
       ngx_null_command
 };
 
@@ -223,6 +230,7 @@ ngx_stream_quic_create_srv_conf(ngx_conf_t *cf)
      *     conf->tp.retry_scid = { 0, NULL };
      *     conf->tp.stateless_reset_token = { 0 }
      *     conf->tp.preferred_address = NULL
+     *     conf->sr_token_key = { 0, NULL }
      *     conf->require_alpn = 0;
      */
 
@@ -304,6 +312,8 @@ ngx_stream_quic_merge_srv_conf(ngx_conf_t *cf, void *parent, void *child)
         }
     }
 
+    ngx_conf_merge_str_value(conf->sr_token_key, prev->sr_token_key, "");
+
     scf = ngx_stream_conf_get_module_srv_conf(cf, ngx_stream_ssl_module);
     conf->ssl = &scf->ssl;