comparison src/event/quic/ngx_event_quic_ssl.c @ 8886:66b4ff373dd9 quic

QUIC: refactored OCSP validation in preparation for 0-RTT support.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 26 Oct 2021 17:43:10 +0300
parents 646bb5361437
children 61b038fb59c6
comparison
equal deleted inserted replaced
8885:da112e7f8de6 8886:66b4ff373dd9
359 359
360 static ngx_int_t 360 static ngx_int_t
361 ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data) 361 ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data)
362 { 362 {
363 int n, sslerr; 363 int n, sslerr;
364 ngx_int_t rc;
365 ngx_buf_t *b; 364 ngx_buf_t *b;
366 ngx_chain_t *cl; 365 ngx_chain_t *cl;
367 ngx_ssl_conn_t *ssl_conn; 366 ngx_ssl_conn_t *ssl_conn;
368 ngx_quic_frame_t *frame; 367 ngx_quic_frame_t *frame;
369 ngx_quic_connection_t *qc; 368 ngx_quic_connection_t *qc;
461 /* start accepting clients on negotiated number of server ids */ 460 /* start accepting clients on negotiated number of server ids */
462 if (ngx_quic_create_sockets(c) != NGX_OK) { 461 if (ngx_quic_create_sockets(c) != NGX_OK) {
463 return NGX_ERROR; 462 return NGX_ERROR;
464 } 463 }
465 464
466 rc = ngx_ssl_ocsp_validate(c); 465 if (ngx_quic_init_streams(c) != NGX_OK) {
467 466 return NGX_ERROR;
468 if (rc == NGX_ERROR) { 467 }
469 return NGX_ERROR;
470 }
471
472 if (rc == NGX_AGAIN) {
473 c->ssl->handler = ngx_quic_init_streams;
474 return NGX_OK;
475 }
476
477 ngx_quic_init_streams(c);
478 468
479 return NGX_OK; 469 return NGX_OK;
480 } 470 }
481 471
482 472