nghttpx: Guard TLS1_3_VERSION

50662c9c · Tatsuhiro Tsujikawa · addd614e · 50662c9c
Commit 50662c9c authored 3 years ago by Tatsuhiro Tsujikawa
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

src/shrpx_tls.cc src/shrpx_tls.cc +2 -0

No files found.
--- a/src/shrpx_tls.cc
+++ b/src/shrpx_tls.cc
@@ -560,11 +560,13 @@ int ticket_key_cb(SSL *ssl, unsigned char *key_name, unsigned char *iv,
               nullptr);
  EVP_DecryptInit_ex(ctx, key.cipher, nullptr, key.data.enc_key.data(), iv);

+#ifdef TLS1_3_VERSION
  // If ticket_key_cb is not set, OpenSSL always renew ticket for
  // TLSv1.3.
  if (SSL_version(ssl) == TLS1_3_VERSION) {
    return 2;
  }
+#endif // TLS1_3_VERSION

  return i == 0 ? 1 : 2;
 }