mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-21 22:01:31 +02:00
Code Issues Projects Releases Wiki Activity

MINOR: cfgparse: Do not modify the QUIC xprt when parsing "ssl".

Browse Source 
When parsing "ssl" keyword for TLS bindings, we must not use the same xprt as the one
for TLS/TCP connections. So, do not modify the QUIC xprt which will be initialized
when parsing QUIC addresses wich "ssl" bindings.
This commit is contained in:
Frdric Lcaille 2020-11-23 11:33:12 +01:00 committed by Willy Tarreau
parent 901ee2f37b
commit e50afbd4e4
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/cfgparse-ssl.c
View File

@ -1040,7 +1040,9 @@ static int bind_parse_alpn(char **args, int cur_arg, struct proxy *px, struct bi
/* parse the "ssl" bind keyword */
static int bind_parse_ssl(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
{
conf->xprt = &ssl_sock;
/* Do not change the xprt for QUIC. */
if (conf->xprt != xprt_get(XPRT_QUIC))
conf->xprt = &ssl_sock;
conf->is_ssl = 1;
if (global_ssl.listen_default_ciphers && !conf->ssl_conf.ciphers)