]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 29 Jul 2024 13:42:47 +0000 (15:42 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Tue, 30 Jul 2024 16:53:08 +0000 (18:53 +0200)
Then reactivate HAVE_SSL_0RTT and HAVE_SSL_0RTT_QUIC for AWS-LC, which
were wrongly deactivated in f5353f2c ("MINOR: ssl: add HAVE_SSL_0RTT
constant").

Must be backported to 3.0.

include/haproxy/openssl-compat.h

index ab4f58e96aded18740183e08d45d6216e4f0ed09..dc903063ed28e491057a236aa387085078114073 100644 (file)
 #define HAVE_SSL_get0_verified_chain
 #endif
 
-#if defined(SSL_OP_NO_ANTI_REPLAY)
+#if defined(SSL_OP_NO_ANTI_REPLAY) || defined(OPENSSL_IS_BORINGSSL) || defined(USE_OPENSSL_AWSLC)
 #define HAVE_SSL_0RTT
 #endif