From 0a11fdbb28d2efaaf2a541c321d4c5566bf1fbe5 Mon Sep 17 00:00:00 2001 From: Sergey Kandaurov Date: Mon, 1 Jun 2020 19:53:13 +0300 Subject: Compatibility with BoringSSL master branch. Recently BoringSSL introduced SSL_set_quic_early_data_context() that serves as an additional constrain to enable 0-RTT in QUIC. Relevant changes: * https://boringssl.googlesource.com/boringssl/+/7c52299%5E!/ * https://boringssl.googlesource.com/boringssl/+/8519432%5E!/ --- auto/lib/openssl/conf | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'auto/lib/openssl') diff --git a/auto/lib/openssl/conf b/auto/lib/openssl/conf index 046317f8a..f4dcab725 100644 --- a/auto/lib/openssl/conf +++ b/auto/lib/openssl/conf @@ -167,3 +167,15 @@ END fi fi + + +if [ $USE_OPENSSL_QUIC = YES ]; then + ngx_feature="OpenSSL QUIC 0-RTT context" + ngx_feature_name="NGX_OPENSSL_QUIC_ZRTT_CTX" + ngx_feature_run=no + ngx_feature_incs="#include " + ngx_feature_path= + ngx_feature_libs="-lssl -lcrypto $NGX_LIBDL $NGX_LIBPTHREAD" + ngx_feature_test="SSL_set_quic_early_data_context(NULL, NULL, 0)" + . auto/feature +fi -- cgit