tree 99ec98b83105ab3ad2acbdf7b33f176850dbdcca
parent cd3732456bda55d4cde9d20651560496c0ab9322
author Olivier Houchard <ohouchard@haproxy.com> 1576593594 +0100
committer Olivier Houchard <cognet@ci0.org> 1576593938 +0100

BUG/MEDIUM: ssl: Don't set the max early data we can receive too early.

When accepting the max early data, don't set it on the SSL_CTX while parsing
the configuration, as at this point global.tune.maxrewrite may still be -1,
either because it was not set, or because it hasn't been set yet. Instead,
set it for each connection, just after we created the new SSL.
Not doing so meant that we could pretend to accept early data bigger than one
of our buffer.

This should be backported to 2.1, 2.0, 1.9 and 1.8.