Skip to content

Commit

Permalink
Ensure the QUIC TLS SSL object is marked as shutdown
Browse files Browse the repository at this point in the history
If we shutdown the QUIC connection then we should mark the underlying
TLS SSL object as shutdown as well. Otherwise any sessions are considered
unusable for resumption.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from #21591)
  • Loading branch information
mattcaswell authored and hlandau committed Aug 2, 2023
1 parent 829eec9 commit f219abe
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions ssl/quic/quic_impl.c
Original file line number Diff line number Diff line change
Expand Up @@ -1203,6 +1203,8 @@ int ossl_quic_conn_shutdown(SSL *s, uint64_t flags,
ossl_quic_channel_local_close(ctx.qc->ch,
args != NULL ? args->quic_error_code : 0);

SSL_set_shutdown(ctx.qc->tls, SSL_SENT_SHUTDOWN);

if (ossl_quic_channel_is_terminated(ctx.qc->ch)) {
quic_unlock(ctx.qc);
return 1;
Expand Down

0 comments on commit f219abe

Please sign in to comment.