diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2021-06-17 12:35:38 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2021-06-17 12:35:38 +0300 |
| commit | b0bffa2bbb6f39230dbc2646aa308bef061825fd (patch) | |
| tree | 9b2e90accf0428c4497f6e30a573ba6118ef4228 /src | |
| parent | f997461f239799de256b0fd44de907cf5d0c3c39 (diff) | |
| download | nginx-b0bffa2bbb6f39230dbc2646aa308bef061825fd.tar.gz nginx-b0bffa2bbb6f39230dbc2646aa308bef061825fd.tar.bz2 | |
QUIC: compact initial secrets table.
Diffstat (limited to 'src')
| -rw-r--r-- | src/event/quic/ngx_event_quic_protection.c | 38 |
1 files changed, 6 insertions, 32 deletions
diff --git a/src/event/quic/ngx_event_quic_protection.c b/src/event/quic/ngx_event_quic_protection.c index 5bb81c87c..317eb094c 100644 --- a/src/event/quic/ngx_event_quic_protection.c +++ b/src/event/quic/ngx_event_quic_protection.c @@ -212,41 +212,15 @@ ngx_quic_keys_set_initial_secret(ngx_pool_t *pool, ngx_quic_keys_t *keys, ngx_str_t *key; ngx_str_t *prk; } seq[] = { - /* labels per RFC 9001, 5.1. Packet Protection Keys */ { ngx_string("tls13 client in"), &client->secret, &iss }, - { - ngx_string("tls13 quic key"), - &client->key, - &client->secret, - }, - { - ngx_string("tls13 quic iv"), - &client->iv, - &client->secret, - }, - { - ngx_string("tls13 quic hp"), - &client->hp, - &client->secret, - }, + { ngx_string("tls13 quic key"), &client->key, &client->secret }, + { ngx_string("tls13 quic iv"), &client->iv, &client->secret }, + { ngx_string("tls13 quic hp"), &client->hp, &client->secret }, { ngx_string("tls13 server in"), &server->secret, &iss }, - { - ngx_string("tls13 quic key"), - &server->key, - &server->secret, - }, - { - ngx_string("tls13 quic iv"), - &server->iv, - &server->secret, - }, - { - ngx_string("tls13 quic hp"), - &server->hp, - &server->secret, - }, - + { ngx_string("tls13 quic key"), &server->key, &server->secret }, + { ngx_string("tls13 quic iv"), &server->iv, &server->secret }, + { ngx_string("tls13 quic hp"), &server->hp, &server->secret }, }; for (i = 0; i < (sizeof(seq) / sizeof(seq[0])); i++) { |