]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: quic: enable SSL on QUIC servers automatically
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Fri, 31 Oct 2025 08:58:57 +0000 (09:58 +0100)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Fri, 31 Oct 2025 10:32:14 +0000 (11:32 +0100)
Previously, QUIC servers were rejected if SSL was not explicitely
activated using 'ssl' configuration keyword.

Change this behavior : now SSL is automatically activated for QUIC
servers when the keyword is missing. A warning is displayed as it is
considered better to explicitely note that SSL is in use.

src/server.c

index 0411eb4a31abe7f72f686adc79318fb789ac471d..26103cf18514373562b43f6ca1e8d5b972d7a212 100644 (file)
@@ -3931,8 +3931,8 @@ static int _srv_parse_finalize(char **args, int cur_arg,
 #ifdef USE_QUIC
        if (srv_is_quic(srv)) {
                if (!srv->use_ssl) {
-                       ha_alert("QUIC protocol detected without explicit SSL requirement. Use 'ssl' to fix this.\n");
-                       return ERR_ALERT | ERR_FATAL;
+                       srv->use_ssl = 1;
+                       ha_warning("QUIC protocol detected, enabling ssl. Use 'ssl' to shut this warning.\n");
                }
 
                if (!srv->ssl_ctx.alpn_str &&