From ad20a56971ff6f5c8bc3f53d233907d94fa960af Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= <flecaille@haproxy.com>
Date: Mon, 16 May 2022 16:51:41 +0200
Subject: [PATCH] MINOR: cfgparse: Update for "cluster-secret" keyword for QUIC
 Retry

The QUIC Retry feature is disabled if no "cluster-secret" setting was set.
---
 doc/configuration.txt | 5 +++--
 src/cfgparse.c        | 4 ++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/doc/configuration.txt b/doc/configuration.txt
index 7293a3cb4..f8a36b0ad 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -1170,8 +1170,9 @@ cluster-secret <secret>
   Define an ASCII string secret shared between several nodes belonging to the
   same cluster. It could be used for different usages. It is at least used to
   derive stateless reset tokens for all the QUIC connections instantiated by
-  this process. If you do not set this parameter, the stateless reset QUIC
-  feature will be silently disabled.
+  this process. This is also the case to derive secrets used to encrypt Retry
+  tokens. If you do not set this parameter, the stateless reset and Retry QUIC
+  features will be both silently disabled.
 
 close-spread-time <time>
   Define a time window during which idle connections and active connections
diff --git a/src/cfgparse.c b/src/cfgparse.c
index 976cd59ae..c123ff1d7 100644
--- a/src/cfgparse.c
+++ b/src/cfgparse.c
@@ -4010,8 +4010,8 @@ int check_config_validity()
 	}
 
 	if (diag_no_cluster_secret)
-		ha_diag_warning("No cluster secret was set. The stateless reset feature"
-		                " is disabled for all QUIC bindings.\n");
+		ha_diag_warning("No cluster secret was set. The stateless reset and Retry"
+		                " features are disabled for all QUIC bindings.\n");
 
 	/*
 	 * Recount currently required checks.