From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 7 Mar 2024 16:16:57 +0000 (+0100)
Subject: dnsdist: Return the correct TLS provider for DoQ and DoH3 frontends
X-Git-Tag: dnsdist-1.10.0-alpha0~8^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=abac20e4fdbd02bb4ed64a3a781a5ca02bcc9de3;p=thirdparty%2Fpdns.git

dnsdist: Return the correct TLS provider for DoQ and DoH3 frontends
---

diff --git a/pdns/dnsdistdist/dnsdist-lua-bindings.cc b/pdns/dnsdistdist/dnsdist-lua-bindings.cc
index 21afaf5dd7..e2bf8aef86 100644
--- a/pdns/dnsdistdist/dnsdist-lua-bindings.cc
+++ b/pdns/dnsdistdist/dnsdist-lua-bindings.cc
@@ -442,6 +442,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getConfiguredTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getRequestedProvider();
     }
@@ -452,6 +455,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getEffectiveTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getEffectiveProvider();
     }