]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: quic: Do not drop secret key but drop the CRYPTO data
authorFrédéric Lécaille <flecaille@haproxy.com>
Mon, 3 Jan 2022 16:00:35 +0000 (17:00 +0100)
committerFrédéric Lécaille <flecaille@haproxy.com>
Tue, 4 Jan 2022 16:30:00 +0000 (17:30 +0100)
commit917a7dbdc706acc80814059f514b84c3599c57cb
treec59c858d6b672e1cbee0602b73d6987a5aaea51f
parentee2b8b377fa254f173d34f6f070f71b08b5924a5
MINOR: quic: Do not drop secret key but drop the CRYPTO data

We need to be able to decrypt late Handshake packets after the TLS secret
keys have been discarded. If not the peer send Handshake packet which have
not been acknowledged. But for such packets, we discard the CRYPTO data.
include/haproxy/quic_tls.h
src/xprt_quic.c