]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUILD: quic: enable early data only with >= openssl 1.1.1
authorWilliam Lallemand <wlallemand@haproxy.org>
Fri, 2 Sep 2022 14:24:39 +0000 (16:24 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 7 Sep 2022 07:33:46 +0000 (09:33 +0200)
Disable the early data in the QUIC code when not built with openssl >=
1.1.1.

LibreSSL 3.6.0 is impacted.

src/xprt_quic.c

index d8c0f5e9471acee920db9beca29a7b58a102cf79..8cc927e819d2a3c2873f07b7d58016f4cd52ff72 100644 (file)
@@ -5760,10 +5760,11 @@ static int qc_conn_alloc_ssl_ctx(struct quic_conn *qc)
                                     qc->enc_params, qc->enc_params_len) == -1) {
                        goto err;
                }
-
+#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
                /* Enabling 0-RTT */
                if (bc->ssl_conf.early_data)
                        SSL_set_quic_early_data_enabled(ctx->ssl, 1);
+#endif
 
                SSL_set_accept_state(ctx->ssl);
        }