]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: quic: separate path for rx and tx with set_encryption_secrets
authorWilliam Lallemand <wlallemand@haproxy.org>
Wed, 14 Sep 2022 15:54:05 +0000 (17:54 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 14 Sep 2022 16:16:37 +0000 (18:16 +0200)
commit95fc737fc6edfa2575ce982b739184e99475c215
tree5c544872ebf1c8b62ff8f4cc08992c560a362239
parent1c8f3b386d431fceaea4fee72426e4e187451fbf
MEDIUM: quic: separate path for rx and tx with set_encryption_secrets

With quicTLS the set_encruption_secrets callback is always called with
the read_secret and the write_secret.

However this is not the case with libreSSL, which uses the
set_read_secret()/set_write_secret() mecanism. It still provides the
set_encryption_secrets() callback, which is called with a NULL
parameter for the write_secret during the read, and for the read_secret
during the write.

The exchange key was not designed in haproxy to be called separately for
read and write, so this patch allow calls with read or write key to
NULL.
include/haproxy/quic_tls.h
src/xprt_quic.c