]> git.kaiwu.me - nginx.git/commitdiff
QUIC: ignore the QUIC extension received in TLS handshake
authorSergey Kandaurov <pluknet@nginx.com>
Thu, 10 Sep 2026 14:38:31 +0000 (18:38 +0400)
committerSergey Kandaurov <pluknet@nginx.com>
Tue, 15 Sep 2026 15:06:31 +0000 (19:06 +0400)
Instead of failing the handshake, it is now accepted and ignored like
any other unknown extension.  Unlike stated in RFC 9001, Section 8.2,
this represents less strict behaviour following RFC 8446, Section 4.2.

src/event/quic/ngx_event_quic_openssl_compat.c

index 933cd7670f6ecb608b3924a3b794400645acf8d3..dcdaa908f4e315d659b0c3873cc7634aa16ff542 100644 (file)
@@ -346,7 +346,7 @@ ngx_quic_compat_parse_transport_params_callback(SSL *ssl, unsigned int ext_type,
 
     c = ngx_ssl_get_connection(ssl);
     if (c->type != SOCK_DGRAM) {
-        return 0;
+        return 1;
     }
 
     ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,