Fixed nonce in short packet protection.

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
index 6ea9d23edd87094df99cfd0b8e31a6f9c08dbd8e..55eea0137a7f553f990a58fba501c7969c8a82c2 100644 (file)
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -758,7 +758,9 @@ ngx_quic_create_short_packet(ngx_connection_t *c, ngx_ssl_conn_t *ssl_conn,
     }
 
     nonce = ngx_pstrdup(c->pool, &pkt->secret->iv);
-    if (pkt->level == ssl_encryption_handshake) {
+    if (pkt->level == ssl_encryption_handshake
+        || pkt->level == ssl_encryption_application)
+    {
         nonce[11] ^= (*pkt->number - 1);
     }