changeset 8717:0a0b1de9ccab quic

QUIC: fixed expected TLS codepoint with final draft and BoringSSL. A reasonable codepoint is always set[1] explicitly so that it doesn't depend on the default library value that may change[2] in the future. [1] https://boringssl.googlesource.com/boringssl/+/3d8b8c3d [2] https://boringssl.googlesource.com/boringssl/+/c47bfce0
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 16 Mar 2021 13:48:28 +0300
parents 1c48629cfa74
children 554e11a325a9
files src/event/quic/ngx_event_quic.c
diffstat 1 files changed, 4 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/src/event/quic/ngx_event_quic.c
+++ b/src/event/quic/ngx_event_quic.c
@@ -1803,6 +1803,10 @@ ngx_quic_init_connection(ngx_connection_
     }
 #endif
 
+#if BORINGSSL_API_VERSION >= 13
+    SSL_set_quic_use_legacy_codepoint(ssl_conn, qc->version != 1);
+#endif
+
     if (ngx_quic_new_sr_token(c, &qc->dcid, qc->conf->sr_token_key,
                               qc->tp.sr_token)
         != NGX_OK)