Fixed nonce in short packet protection.

This commit is contained in:
Sergey Kandaurov 2020-03-10 18:40:18 +03:00
parent c2afb5ec8a
commit 385408732e

View File

@ -758,7 +758,9 @@ ngx_quic_create_short_packet(ngx_connection_t *c, ngx_ssl_conn_t *ssl_conn,
}
nonce = ngx_pstrdup(c->pool, &pkt->secret->iv);
if (pkt->level == ssl_encryption_handshake) {
if (pkt->level == ssl_encryption_handshake
|| pkt->level == ssl_encryption_application)
{
nonce[11] ^= (*pkt->number - 1);
}