]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: connection: Missing QUIC initialization
authorFrédéric Lécaille <flecaille@haproxy.com>
Wed, 10 Mar 2021 10:51:38 +0000 (11:51 +0100)
committerWilly Tarreau <w@1wt.eu>
Wed, 10 Mar 2021 11:21:05 +0000 (12:21 +0100)
The QUIC connection struct connection member was not initialized. This may
make randomly haproxy handle TLS connections as QUIC ones only when QUIC support
is enabled leading to such OpenSSL errors (captured from a reg test output, TLS
Client-Hello callback failed):

    OpenSSL error[0x10000085] OPENSSL_internal: CONNECTION_REJECTED
    OpenSSL error[0x10000410] OPENSSL_internal: SSLV3_ALERT_HANDSHAKE_FAILURE
    OpenSSL error[0x1000009a] OPENSSL_internal: HANDSHAKE_FAILURE_ON_CLIENT_HELLO

This patch should fix #1168 github issue.

include/haproxy/connection.h

index 46a521e01c18be64d26d42dca3fc2213377cb679..739d6a636ed45a8ce45c53a1c47f356b33f33793 100644 (file)
@@ -357,6 +357,7 @@ static inline void conn_init(struct connection *conn, void *target)
        conn->dst = NULL;
        conn->proxy_authority = IST_NULL;
        conn->proxy_unique_id = IST_NULL;
+       conn->qc = NULL;
        conn->hash_node = NULL;
 }