From 85d763b11e23e948a6f8e17aa8a14d74470899c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= <flecaille@haproxy.com>
Date: Fri, 2 Jun 2023 16:51:43 +0200
Subject: [PATCH] MINOR: quic: Do not enable O-RTT with USE_QUIC_OPENSSL_COMPAT

Modify ssl_quic_initial_ctx() to disable O-RTT when the QUIC OpenSSL wrapper was
enabled.
---
 src/quic_conn.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/quic_conn.c b/src/quic_conn.c
index 157cdbd73..dd2c6f235 100644
--- a/src/quic_conn.c
+++ b/src/quic_conn.c
@@ -1444,7 +1444,9 @@ int ssl_quic_initial_ctx(struct bind_conf *bind_conf)
 #  if defined(SSL_OP_NO_ANTI_REPLAY)
 	if (bind_conf->ssl_conf.early_data) {
 		SSL_CTX_set_options(ctx, SSL_OP_NO_ANTI_REPLAY);
+#ifndef USE_QUIC_OPENSSL_COMPAT
 		SSL_CTX_set_max_early_data(ctx, 0xffffffff);
+#endif
 	}
 #  endif /* !SSL_OP_NO_ANTI_REPLAY */
 	SSL_CTX_set_client_hello_cb(ctx, ssl_sock_switchctx_cbk, NULL);