aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorSergey Kandaurov <pluknet@nginx.com>2021-03-16 13:48:28 +0300
committerSergey Kandaurov <pluknet@nginx.com>2021-03-16 13:48:28 +0300
commit6a0bea5361d0edfa69fce916739b8b1b96c7fb4f (patch)
tree52df5291488bc937f549d1777892bcf476920bf6 /src
parentb8fd5dc640d809e87314fca2afbb43f6da28ea92 (diff)
downloadnginx-6a0bea5361d0edfa69fce916739b8b1b96c7fb4f.tar.gz
nginx-6a0bea5361d0edfa69fce916739b8b1b96c7fb4f.zip
QUIC: fixed expected TLS codepoint with final draft and BoringSSL.
A reasonable codepoint is always set[1] explicitly so that it doesn't depend on the default library value that may change[2] in the future. [1] https://boringssl.googlesource.com/boringssl/+/3d8b8c3d [2] https://boringssl.googlesource.com/boringssl/+/c47bfce0
Diffstat (limited to 'src')
-rw-r--r--src/event/quic/ngx_event_quic.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/event/quic/ngx_event_quic.c b/src/event/quic/ngx_event_quic.c
index 1cb9e276c..cb6aff3fb 100644
--- a/src/event/quic/ngx_event_quic.c
+++ b/src/event/quic/ngx_event_quic.c
@@ -1803,6 +1803,10 @@ ngx_quic_init_connection(ngx_connection_t *c)
}
#endif
+#if BORINGSSL_API_VERSION >= 13
+ SSL_set_quic_use_legacy_codepoint(ssl_conn, qc->version != 1);
+#endif
+
if (ngx_quic_new_sr_token(c, &qc->dcid, qc->conf->sr_token_key,
qc->tp.sr_token)
!= NGX_OK)