]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper.
authorFrédéric Lécaille <flecaille@haproxy.com>
Thu, 8 Jun 2023 07:28:31 +0000 (09:28 +0200)
committerFrédéric Lécaille <flecaille@haproxy.com>
Fri, 21 Jul 2023 13:54:31 +0000 (15:54 +0200)
When the QUIC OpenSSL wrapper is used, the keylog has to be set and a QUIC
specific TLS 1.3 extension must be added to the EncryptedExtensions message.
This is done by quic_tls_compat_init().

src/quic_conn.c

index 7b37174c9a253fbbe007eb528e14f7b36302c7f9..d998ad24eb720d7902b9aa9e557bbef966609677 100644 (file)
@@ -1458,6 +1458,10 @@ int ssl_quic_initial_ctx(struct bind_conf *bind_conf)
 # endif
        SSL_CTX_set_tlsext_servername_arg(ctx, bind_conf);
 #endif
+#ifdef USE_QUIC_OPENSSL_COMPAT
+       if (!quic_tls_compat_init(bind_conf, ctx))
+               cfgerr |= ERR_ALERT | ERR_FATAL;
+#endif
 
        return cfgerr;
 }