Mercurial > hg > nginx
diff src/event/ngx_event_openssl.c @ 8178:a9ff4392ecde quic
QUIC header protection routines, introduced ngx_quic_tls_hp().
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Fri, 28 Feb 2020 13:09:52 +0300 |
parents | 76e29ff31cd3 |
children | 7ee1ada04c8a |
line wrap: on
line diff
--- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -593,29 +593,12 @@ quic_add_handshake_data(ngx_ssl_conn_t * return 0; } - EVP_CIPHER_CTX *ctx = EVP_CIPHER_CTX_new(); u_char *sample = &out.data[3]; // pnl=0 uint8_t mask[16]; - int outlen; - - if (EVP_EncryptInit_ex(ctx, EVP_aes_128_ecb(), NULL, secret->hp.data, NULL) - != 1) - { - EVP_CIPHER_CTX_free(ctx); - ngx_ssl_error(NGX_LOG_INFO, c->log, 0, - "EVP_EncryptInit_ex() failed"); + if (ngx_quic_tls_hp(c, EVP_aes_128_ecb(), secret, mask, sample) != NGX_OK) { return 0; } - if (!EVP_EncryptUpdate(ctx, mask, &outlen, sample, 16)) { - EVP_CIPHER_CTX_free(ctx); - ngx_ssl_error(NGX_LOG_INFO, c->log, 0, - "EVP_EncryptUpdate() failed"); - return 0; - } - - EVP_CIPHER_CTX_free(ctx); - m = ngx_hex_dump(buf, (u_char *) sample, 16) - buf; ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, "quic_add_handshake_data sample: %*s, len: %uz",