]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: quic: Do not enable 0RTT with SSL_set_quic_early_data_enabled()
authorFrédéric Lécaille <flecaille@haproxy.com>
Fri, 2 Jun 2023 15:05:38 +0000 (17:05 +0200)
committerFrédéric Lécaille <flecaille@haproxy.com>
Fri, 21 Jul 2023 13:53:41 +0000 (15:53 +0200)
SSL_set_quic_early_data_enabled is not implemented by the QUIC OpenSSL wrapper.
Furthermore O-RTT is not supported by this wrapper. Do not know why at
this time.

src/quic_conn.c

index 3ecd377f8534ccd84a86b3d7e459ee929b1854e1..c1d9cd8025491675b26e923de3d0f8d31a43b73c 100644 (file)
@@ -6721,9 +6721,11 @@ static int qc_conn_alloc_ssl_ctx(struct quic_conn *qc)
                if (qc_ssl_sess_init(qc, bc->initial_ctx, &ctx->ssl) == -1)
                        goto err;
 #if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#ifndef USE_QUIC_OPENSSL_COMPAT
                /* Enabling 0-RTT */
                if (bc->ssl_conf.early_data)
                        SSL_set_quic_early_data_enabled(ctx->ssl, 1);
+#endif
 #endif
 
                SSL_set_accept_state(ctx->ssl);