]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: quic+openssl_compat: Do not start without "limited-quic"
authorFrédéric Lécaille <flecaille@haproxy.com>
Thu, 17 Aug 2023 08:15:09 +0000 (10:15 +0200)
committerWilly Tarreau <w@1wt.eu>
Thu, 17 Aug 2023 13:44:03 +0000 (15:44 +0200)
commit0e13325f231d9c7203ec378630f97323bfaf83e0
tree21a4a1cd5cb6290c8d1940f326fdb005fe46adc8
parentcd97ba147c4ff11e33d6683ec6a756957602405b
MINOR: quic+openssl_compat: Do not start without "limited-quic"

Add a check for limited-quic in check_config_validity() when compiled
with USE_QUIC_OPENSSL_COMPAT so that we prevent a config from starting
accidentally with limited QUIC support. If a QUIC listener is found
when using the compatibility mode and limited-quic is not set, an error
message is reported explaining that the SSL library is not compatible
and proposing the user to enable limited-quic if that's what they want,
and the startup fails.

This partially reverts commit 7c730803d ("MINOR: quic: Warning for
OpenSSL wrapper QUIC bindings without "limited-quic"") since a warning
was not sufficient.
src/cfgparse.c
src/protocol.c