]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: Don't restrict usage of early-data with no ALPN next
authorOlivier Houchard <ohouchard@haproxy.com>
Wed, 19 Nov 2025 17:34:07 +0000 (18:34 +0100)
committerOlivier Houchard <cognet@ci0.org>
Wed, 19 Nov 2025 17:40:02 +0000 (18:40 +0100)
commit7ab7c8957f12c613917fd540f12c68e19e884d74
tree333708462b5ad9eb60fa30049d15e3a856f8771b
parentf6373a6ca841ea579b494cfd0b737956358b9ed5
MEDIUM: ssl: Don't restrict usage of early-data with no ALPN

In ssl_sock_io_cb(), immediately create the mux if we received early
data even if we have not received an ALPN. At this point, if we have not
received the ALPN, we will not receive one anyway, so we can just use
the default mux (h1 when in mode HTTP, pt when in mode TCP).
That way, we can immediately process early data even if the client sent
not ALPN (which will happen if the client is haproxy with no ALPN on the
server line).
src/ssl_sock.c