From 6a099ee50a5bd1c7dde90fc7b2ba5b97f405060b Mon Sep 17 00:00:00 2001
From: Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>
Date: Sat, 18 Sep 2021 19:27:47 +0900
Subject: [PATCH] nghttpx: QUIC requires TLS

---
 src/shrpx_config.cc | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/src/shrpx_config.cc b/src/shrpx_config.cc
index 9a2f24a7..f210128b 100644
--- a/src/shrpx_config.cc
+++ b/src/shrpx_config.cc
@@ -2777,9 +2777,16 @@ int parse_config(Config *config, int optid, const StringRef &opt,
       return -1;
     }
 
-    if (params.quic && params.alt_mode != UpstreamAltMode::NONE) {
-      LOG(ERROR) << "frontend: api or healthmon cannot be used with quic";
-      return -1;
+    if (params.quic) {
+      if (params.alt_mode != UpstreamAltMode::NONE) {
+        LOG(ERROR) << "frontend: api or healthmon cannot be used with quic";
+        return -1;
+      }
+
+      if (!params.tls) {
+        LOG(ERROR) << "frontend: quic requires TLS";
+        return -1;
+      }
     }
 
     UpstreamAddr addr{};