Mercurial > hg > nginx
changeset 8655:f596a4e5794b quic
QUIC: disabling bidirectional SSL shutdown earlier.
Notably, this fixes an issue with Chrome that can emit a "certificate_unknown"
alert during the SSL handshake where c->ssl->no_wait_shutdown is not yet set.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Sun, 06 Dec 2020 14:24:38 +0000 |
parents | 9ebeed8cd1b8 |
children | 43f3574b3e6f |
files | src/event/ngx_event_quic.c |
diffstat | 1 files changed, 2 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/src/event/ngx_event_quic.c Fri Dec 04 15:19:03 2020 +0300 +++ b/src/event/ngx_event_quic.c Sun Dec 06 14:24:38 2020 +0000 @@ -1563,6 +1563,8 @@ return NGX_ERROR; } + c->ssl->no_wait_shutdown = 1; + ssl_conn = c->ssl->connection; if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) { @@ -3726,7 +3728,6 @@ "quic handshake completed successfully"); c->ssl->handshaked = 1; - c->ssl->no_wait_shutdown = 1; frame = ngx_quic_alloc_frame(c, 0); if (frame == NULL) {