walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Always renew TLS ticket for TLSv1.3

This commit is contained in:
Tatsuhiro Tsujikawa 2021-09-05 22:26:45 +09:00
parent ab16a11aa3
commit 8b579bc7d0
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/shrpx_tls.cc
View File

@ -560,6 +560,12 @@ int ticket_key_cb(SSL *ssl, unsigned char *key_name, unsigned char *iv,
nullptr); nullptr);
EVP_DecryptInit_ex(ctx, key.cipher, nullptr, key.data.enc_key.data(), iv); EVP_DecryptInit_ex(ctx, key.cipher, nullptr, key.data.enc_key.data(), iv);
// If ticket_key_cb is not set, OpenSSL always renew ticket for
// TLSv1.3.
if (SSL_version(ssl) == TLS1_3_VERSION) {
return 2;
}
return i == 0 ? 1 : 2; return i == 0 ? 1 : 2;
} }
} // namespace } // namespace