From e6ec626ac5b21041b997de350f29e385c479155d Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Fri, 2 Sep 2022 16:24:39 +0200 Subject: [PATCH] BUILD: quic: enable early data only with >= openssl 1.1.1 Disable the early data in the QUIC code when not built with openssl >= 1.1.1. LibreSSL 3.6.0 is impacted. --- src/xprt_quic.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/xprt_quic.c b/src/xprt_quic.c index d8c0f5e94..8cc927e81 100644 --- a/src/xprt_quic.c +++ b/src/xprt_quic.c @@ -5760,10 +5760,11 @@ static int qc_conn_alloc_ssl_ctx(struct quic_conn *qc) qc->enc_params, qc->enc_params_len) == -1) { goto err; } - +#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L) /* Enabling 0-RTT */ if (bc->ssl_conf.early_data) SSL_set_quic_early_data_enabled(ctx->ssl, 1); +#endif SSL_set_accept_state(ctx->ssl); }