mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2026-01-19 00:51:37 +01:00
fcc825501c
This patch impacts only haproxy when built against aws-lc TLS stack (OPENSSL_IS_AWSLC). During the SSL_CTX switching from ssl_sock_switchctx_cbk() callback, ssl_sock_switchctx_set() is called. This latter calls SSL_set_SSL_CTX() whose aims is to change the SSL_CTX attached o an SSL object (TLS session). But the aws-lc (or boringssl) implementation of this function copy the "early data enabled" setting value (boolean) coming with the SSL_CTX object into the SSL object. So, if not set in the SSL_CTX object this setting disabled the one which has been set by configuration into the SSL object (see qc_set_quic_early_data_enabled(), it calls SSL_set_early_data_enabled() with an SSL object as parameter). Fix this enabling the "early data enabled" setting into the SSL_CTX before setting this latter into the SSL object. This patch is required to make QUIC 0-RTT work with haproxy built against aws-lc. Note that, this patch should also help in early data support for TCP connections.
The HAProxy documentation has been split into a number of different files for ease of use. Please refer to the following files depending on what you're looking for : - INSTALL for instructions on how to build and install HAProxy - BRANCHES to understand the project's life cycle and what version to use - LICENSE for the project's license - CONTRIBUTING for the process to follow to submit contributions The more detailed documentation is located into the doc/ directory : - doc/intro.txt for a quick introduction on HAProxy - doc/configuration.txt for the configuration's reference manual - doc/lua.txt for the Lua's reference manual - doc/SPOE.txt for how to use the SPOE engine - doc/network-namespaces.txt for how to use network namespaces under Linux - doc/management.txt for the management guide - doc/regression-testing.txt for how to use the regression testing suite - doc/peers.txt for the peers protocol reference - doc/coding-style.txt for how to adopt HAProxy's coding style - doc/internals for developer-specific documentation (not all up to date)