Mercurial > hg > nginx

comparison src/event/quic/ngx_event_quic_ssl.c @ 8827:fe919fd63b0b quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
QUIC: client certificate validation with OCSP.
author Sergey Kandaurov <pluknet@nginx.com>
date Wed, 04 Aug 2021 15:49:18 +0300
parents 4715f3e669f1
children 01bd1c0de1f4
comparison
equal deleted inserted replaced
8826:c35b255d80dc 8827:fe919fd63b0b
359 359
360 static ngx_int_t 360 static ngx_int_t
361 ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data) 361 ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data)
362 { 362 {
363 int n, sslerr; 363 int n, sslerr;
364 ngx_int_t rc;
364 ngx_buf_t *b; 365 ngx_buf_t *b;
365 ngx_chain_t *cl; 366 ngx_chain_t *cl;
366 ngx_ssl_conn_t *ssl_conn; 367 ngx_ssl_conn_t *ssl_conn;
367 ngx_quic_frame_t *frame; 368 ngx_quic_frame_t *frame;
368 ngx_quic_connection_t *qc; 369 ngx_quic_connection_t *qc;
460 /* start accepting clients on negotiated number of server ids */ 461 /* start accepting clients on negotiated number of server ids */
461 if (ngx_quic_create_sockets(c) != NGX_OK) { 462 if (ngx_quic_create_sockets(c) != NGX_OK) {
462 return NGX_ERROR; 463 return NGX_ERROR;
463 } 464 }
464 465
466 rc = ngx_ssl_ocsp_validate(c);
467
468 if (rc == NGX_ERROR) {
469 return NGX_ERROR;
470 }
471
472 if (rc == NGX_AGAIN) {
473 c->ssl->handler = ngx_quic_init_streams;
474 return NGX_OK;
475 }
476
477 ngx_quic_init_streams(c);
478
465 return NGX_OK; 479 return NGX_OK;
466 } 480 }
467 481
468 482
469 ngx_int_t 483 ngx_int_t