Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tighten up QUIC "is early data enabled" checks #38

Open
kaduk opened this issue Jun 29, 2021 · 0 comments
Open

tighten up QUIC "is early data enabled" checks #38

kaduk opened this issue Jun 29, 2021 · 0 comments

Comments

@kaduk
Copy link
Member

kaduk commented Jun 29, 2021

In SSL_set_quic_early_data_enabled() we apply a few consistency checks before allowing a state of SSL_EARLY_DATA_CONNECTING to be set. One such check involves inspecting the value of ssl->session->ext.max_early_data and treating a value of 0 as disabling early data. However, per RFC 9001 the max_early_data_size parameter must be exactly 0xffffffff in order to enable 0-RTT for QUIC. AFAICT we should use the more-strict check in this case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant