From abac20e4fdbd02bb4ed64a3a781a5ca02bcc9de3 Mon Sep 17 00:00:00 2001
From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 7 Mar 2024 17:16:57 +0100
Subject: [PATCH] dnsdist: Return the correct TLS provider for DoQ and DoH3
 frontends

---
 pdns/dnsdistdist/dnsdist-lua-bindings.cc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pdns/dnsdistdist/dnsdist-lua-bindings.cc b/pdns/dnsdistdist/dnsdist-lua-bindings.cc
index 21afaf5dd7..e2bf8aef86 100644
--- a/pdns/dnsdistdist/dnsdist-lua-bindings.cc
+++ b/pdns/dnsdistdist/dnsdist-lua-bindings.cc
@@ -442,6 +442,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getConfiguredTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getRequestedProvider();
     }
@@ -452,6 +455,9 @@ void setupLuaBindings(LuaContext& luaCtx, bool client, bool configCheck)
   });
   luaCtx.registerFunction<std::string (ClientState::*)() const>("getEffectiveTLSProvider", [](const ClientState& frontend) {
     setLuaNoSideEffect();
+    if (frontend.doqFrontend != nullptr || frontend.doh3Frontend != nullptr) {
+      return std::string("BoringSSL");
+    }
     if (frontend.tlsFrontend != nullptr) {
       return frontend.tlsFrontend->getEffectiveProvider();
     }
-- 
2.47.2