]> git.kaiwu.me - nginx.git/commit
QUIC: fixed compat with ciphers other than AES128 (ticket #2500).
authorRoman Arutyunyan <arut@nginx.com>
Sun, 28 May 2023 07:17:07 +0000 (11:17 +0400)
committerRoman Arutyunyan <arut@nginx.com>
Sun, 28 May 2023 07:17:07 +0000 (11:17 +0400)
commitcb70d5954c65b5683bc1c104bbf2466b73f4aa2b
tree246397522e346967a40132fffd1707227b40ab77
parentfddcc30e999e56a9838a5ed818469afcd244f395
QUIC: fixed compat with ciphers other than AES128 (ticket #2500).

Previously, rec.level field was not uninitialized in SSL_provide_quic_data().
As a result, its value was always ssl_encryption_initial.  Later in
ngx_quic_ciphers() such level resulted in resetting the cipher to
TLS1_3_CK_AES_128_GCM_SHA256 and using AES128 to encrypt the packet.

Now the level is initialized and the right cipher is used.
src/event/quic/ngx_event_quic_openssl_compat.c