mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-06-22 05:40:48 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

QUIC: disabling bidirectional SSL shutdown earlier.

Browse Source 
Notably, this fixes an issue with Chrome that can emit a "certificate_unknown"
alert during the SSL handshake where c->ssl->no_wait_shutdown is not yet set.
This commit is contained in:
Sergey Kandaurov 2020-12-06 14:24:38 +00:00
parent 90ec7ef6db
commit 1d748f1ca3
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/event/ngx_event_quic.c
View File

@ -1563,6 +1563,8 @@ ngx_quic_init_connection(ngx_connection_t *c)
return NGX_ERROR; return NGX_ERROR;
} }
c->ssl->no_wait_shutdown = 1;
ssl_conn = c->ssl->connection; ssl_conn = c->ssl->connection;
if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) { if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) {
@ -3726,7 +3728,6 @@ ngx_quic_crypto_input(ngx_connection_t *c, ngx_quic_frame_t *frame, void *data)
"quic handshake completed successfully"); "quic handshake completed successfully");
c->ssl->handshaked = 1; c->ssl->handshaked = 1;
c->ssl->no_wait_shutdown = 1;
frame = ngx_quic_alloc_frame(c, 0); frame = ngx_quic_alloc_frame(c, 0);
if (frame == NULL) { if (frame == NULL) {