The official NGINX Open Source repository.
Go to file
Sergey Kandaurov fffd2823ba QUIC: added safety belt to prevent using discarded keys.
In addition to triggering alert, it ensures that such packets won't be sent.

With the previous change that marks server keys as discarded by zeroing the
key lengh, it is now an error to send packets with discarded keys.  OpenSSL
based stacks tolerate such behaviour because key length isn't used in packet
protection, but BoringSSL will raise the UNSUPPORTED_KEY_SIZE cipher error.
It won't be possible to use discarded keys with reused crypto contexts as it
happens in subsequent changes.
2023-10-20 18:05:07 +04:00
auto SSL: avoid using OpenSSL config in build directory (ticket #2404). 2023-06-21 01:29:53 +03:00
conf MIME: added image/avif type. 2021-10-25 20:49:15 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2023-07-24 18:04:41 +03:00
docs nginx-1.25.2-RELEASE 2023-08-15 20:03:04 +03:00
misc Updated OpenSSL used for win32 builds. 2023-08-15 18:10:50 +03:00
src QUIC: added safety belt to prevent using discarded keys. 2023-10-20 18:05:07 +04:00
.hgtags release-1.25.2 tag 2023-08-15 20:03:04 +03:00