From d0ebfa4cb97dc212aac4cde740286bc4e4cde30e Mon Sep 17 00:00:00 2001
From: Vladimir Homutov <vl@nginx.com>
Date: Mon, 16 Mar 2020 19:00:47 +0300
Subject: Split transport and crypto parts into separate files.

New files:
    src/event/ngx_event_quic_protection.h
    src/event/ngx_event_quic_protection.c

The protection.h header provides interface to the crypto part of the QUIC:

2 functions to initialize corresponding secrets:

ngx_quic_set_initial_secret()
ngx_quic_set_encryption_secret()

and 2 functions to deal with packet processing:

ngx_quic_encrypt()
ngx_quic_decrypt()

Also, structures representing secrets are defined there.

All functions require SSL connection and a pool, only crypto operations
inside, no access to nginx connections or events.

Currently pool->log is used for the logging (instead of original c->log).
---
 src/core/ngx_core.h | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/core/ngx_core.h')

diff --git a/src/core/ngx_core.h b/src/core/ngx_core.h
index 4594b54fd..a5f7b7af5 100644
--- a/src/core/ngx_core.h
+++ b/src/core/ngx_core.h
@@ -85,6 +85,7 @@ typedef void (*ngx_connection_handler_pt)(ngx_connection_t *c);
 #if (NGX_OPENSSL)
 #include <ngx_event_openssl.h>
 #include <ngx_event_quic.h>
+#include <ngx_event_quic_protection.h>
 #endif
 #include <ngx_process_cycle.h>
 #include <ngx_conf_file.h>
-- 
cgit