From: Frederic Lecaille <flecaille@haproxy.com>
Date: Thu, 3 Jul 2025 18:53:00 +0000 (+0200)
Subject: MINOR: quic-be: Set the backend alpn if not set by conf
X-Git-Tag: v3.3-dev3~28
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=93a94ba87b07c6fa718d9cd92bcedef9ca8b2cbd;p=thirdparty%2Fhaproxy.git

MINOR: quic-be: Set the backend alpn if not set by conf

Simply set the alpn string to "h3,hq_interop" if there is no "alpn" setting for
QUIC backends.
---

diff --git a/src/server.c b/src/server.c
index c2597091a..8a0ba8c85 100644
--- a/src/server.c
+++ b/src/server.c
@@ -43,6 +43,7 @@
 #include <haproxy/sc_strm.h>
 #include <haproxy/server.h>
 #include <haproxy/stats.h>
+#include <haproxy/ssl_sock.h>
 #include <haproxy/stconn.h>
 #include <haproxy/stream.h>
 #include <haproxy/stress.h>
@@ -3854,6 +3855,12 @@ static int _srv_parse_finalize(char **args, int cur_arg,
 			ha_alert("QUIC protocol detected without explicit SSL requirement. Use 'ssl' to fix this.\n");
 			return ERR_ALERT | ERR_FATAL;
 		}
+
+		if (!srv->ssl_ctx.alpn_str &&
+		    ssl_sock_parse_alpn("h3", &srv->ssl_ctx.alpn_str,
+		                        &srv->ssl_ctx.alpn_len, &errmsg) != 0) {
+			return ERR_ALERT | ERR_FATAL;
+		}
 	}
 #endif