diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2023-08-31 19:54:10 +0400 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2023-08-31 19:54:10 +0400 |
| commit | cd5f4cd8d3991414167a734f452e8e3fe98f3916 (patch) | |
| tree | a49dfed5d5f6a5be87d83e75e1679a23dbef116c /src/event/quic/ngx_event_quic_ssl.c | |
| parent | c93cb45ae30760b7cd4ce2d9e053a36449d4e233 (diff) | |
| download | nginx-cd5f4cd8d3991414167a734f452e8e3fe98f3916.tar.gz nginx-cd5f4cd8d3991414167a734f452e8e3fe98f3916.tar.bz2 | |
QUIC: split keys availability checks to read and write sides.
Keys may be released by TLS stack in different times, so it makes sense
to check this independently as well. This allows to fine-tune what key
direction is used when checking keys availability.
When discarding, server keys are now marked in addition to client keys.
Diffstat (limited to 'src/event/quic/ngx_event_quic_ssl.c')
| -rw-r--r-- | src/event/quic/ngx_event_quic_ssl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/event/quic/ngx_event_quic_ssl.c b/src/event/quic/ngx_event_quic_ssl.c index c719a1dd4..7872783f8 100644 --- a/src/event/quic/ngx_event_quic_ssl.c +++ b/src/event/quic/ngx_event_quic_ssl.c @@ -434,7 +434,7 @@ ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data, } if (n <= 0 || SSL_in_init(ssl_conn)) { - if (ngx_quic_keys_available(qc->keys, ssl_encryption_early_data) + if (ngx_quic_keys_available(qc->keys, ssl_encryption_early_data, 0) && qc->client_tp_done) { if (ngx_quic_init_streams(c) != NGX_OK) { |