From 22671b37e3720af223bb2e563a940eaefe28aeb7 Mon Sep 17 00:00:00 2001 From: Sergey Kandaurov Date: Wed, 1 Apr 2020 13:27:42 +0300 Subject: [PATCH] Sending HANDSHAKE_DONE just once with BoringSSL. If early data is accepted, SSL_do_handshake() completes as soon as ClientHello is processed. SSL_in_init() will report the handshake is still in progress. --- src/event/ngx_event_quic.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c index 8c577514e..be86cf3bc 100644 --- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -1060,7 +1060,7 @@ ngx_quic_handle_crypto_frame(ngx_connection_t *c, ngx_quic_header_t *pkt, return NGX_ERROR; } - } else if (n == 1) { + } else if (n == 1 && !SSL_in_init(ssl_conn)) { c->quic->state = NGX_QUIC_ST_APPLICATION; ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,