]> git.kaiwu.me - nginx.git/commit
QUIC: using QUIC API introduced in OpenSSL 3.5.
authorSergey Kandaurov <pluknet@nginx.com>
Thu, 13 Feb 2025 13:00:56 +0000 (17:00 +0400)
committerRoman Arutyunyan <arutyunyan.roman@gmail.com>
Fri, 23 May 2025 11:00:47 +0000 (15:00 +0400)
commit6a134dfd4888fc3850d22294687cfb3940994c69
tree8f23f64df49b8325d87cc82ee9b0ef246d97972d
parent1d4d2f2c962c33aafdd8f79d9fc50b7cacf05e24
QUIC: using QUIC API introduced in OpenSSL 3.5.

Similarly to the QUIC API originated in BoringSSL, this API allows
to register custom TLS callbacks for an external QUIC implementation.
See the SSL_set_quic_tls_cbs manual page for details.

Due to a different approach used in OpenSSL 3.5, handling of CRYPTO
frames was streamlined to always write an incoming CRYPTO buffer to
the crypto context.  Using SSL_provide_quic_data(), this results in
transient allocation of chain links and buffers for CRYPTO frames
received in order.  Testing didn't reveal performance degradation of
QUIC handshakes, https://github.com/nginx/nginx/pull/646 provides
specific results.
auto/lib/openssl/conf
src/event/quic/ngx_event_quic.h
src/event/quic/ngx_event_quic_connection.h
src/event/quic/ngx_event_quic_ssl.c