From bcbd5a287b35813ed667f23afb98db446c572618 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Thu, 8 Jun 2023 09:28:31 +0200 Subject: [PATCH] MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper. When the QUIC OpenSSL wrapper is used, the keylog has to be set and a QUIC specific TLS 1.3 extension must be added to the EncryptedExtensions message. This is done by quic_tls_compat_init(). --- src/quic_conn.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/quic_conn.c b/src/quic_conn.c index 7b37174c9..d998ad24e 100644 --- a/src/quic_conn.c +++ b/src/quic_conn.c @@ -1458,6 +1458,10 @@ int ssl_quic_initial_ctx(struct bind_conf *bind_conf) # endif SSL_CTX_set_tlsext_servername_arg(ctx, bind_conf); #endif +#ifdef USE_QUIC_OPENSSL_COMPAT + if (!quic_tls_compat_init(bind_conf, ctx)) + cfgerr |= ERR_ALERT | ERR_FATAL; +#endif return cfgerr; }