comparison src/event/quic/ngx_event_quic_ack.c @ 8816:7f29db5294bd quic

QUIC: avoid processing 1-RTT with incomplete handshake in OpenSSL. OpenSSL is known to provide read keys for an encryption level before the level is active in TLS, following the old BoringSSL API. In BoringSSL, it was then fixed to defer releasing read keys until QUIC may use them.
author Sergey Kandaurov <pluknet@nginx.com>
date Thu, 22 Jul 2021 15:00:37 +0300
parents 4715f3e669f1
children 4009f120cad4
comparison
equal deleted inserted replaced
8815:8ab0d609af09 8816:7f29db5294bd