tree 9ff8a2d1f6dc1509325c1b45569bc9973381972d
parent a7973a6dce928211bf2414aa594d2bab89d73372
author Frédéric Lécaille <flecaille@haproxy.com> 1638267498 +0100
committer Frédéric Lécaille <flecaille@haproxy.com> 1638269472 +0100

MINOR: quic: Enable the Key Update process

This patch modifies ha_quic_set_encryption_secrets() to store the
secrets received by the TLS stack and prepare the information for the
next key update thanks to quic_tls_key_update().
qc_pkt_decrypt() is modified to check if we must used the next or the
previous key phase information to decrypt a short packet.
The information are rotated if the packet could be decrypted with the
next key phase information. Then new secrets, keys and IVs are updated
calling quic_tls_key_update() to prepare the next key phase.
quic_build_packet_short_header() is also modified to handle the key phase
bit from the current key phase information.