# HG changeset patch
# User Sergey Kandaurov <pluknet@nginx.com>
# Date 1607264678 0
# Node ID f596a4e5794bb2ec916500a690af69a70514e298
# Parent  9ebeed8cd1b85ac7e943af39fe1ff49a73a92d36
QUIC: disabling bidirectional SSL shutdown earlier.

Notably, this fixes an issue with Chrome that can emit a "certificate_unknown"
alert during the SSL handshake where c->ssl->no_wait_shutdown is not yet set.

diff -r 9ebeed8cd1b8 -r f596a4e5794b src/event/ngx_event_quic.c
--- a/src/event/ngx_event_quic.c	Fri Dec 04 15:19:03 2020 +0300
+++ b/src/event/ngx_event_quic.c	Sun Dec 06 14:24:38 2020 +0000
@@ -1563,6 +1563,8 @@
         return NGX_ERROR;
     }
 
+    c->ssl->no_wait_shutdown = 1;
+
     ssl_conn = c->ssl->connection;
 
     if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) {
@@ -3726,7 +3728,6 @@
                    "quic handshake completed successfully");
 
     c->ssl->handshaked = 1;
-    c->ssl->no_wait_shutdown = 1;
 
     frame = ngx_quic_alloc_frame(c, 0);
     if (frame == NULL) {