]> git.ipfire.org Git - thirdparty/pdns.git/commitdiff
dnsdist: Return the correct TLS provider for DoQ and DoH3 frontends 13871/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 7 Mar 2024 16:16:57 +0000 (17:16 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 7 Mar 2024 16:16:57 +0000 (17:16 +0100)
pdns/dnsdistdist/dnsdist-lua-bindings.cc

index 21afaf5dd787e9efccced5f1ce53588ca9cdabb4..e2bf8aef86961b4c96b750aab90f2939cdd02302 100644 (file)
@@ -442,6 +442,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getConfiguredTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getRequestedProvider();
     }
@@ -452,6 +455,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getEffectiveTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getEffectiveProvider();
     }