MINOR: ssl: ssl_fc_has_early should work for BoringSSL
CO_FL_EARLY_SSL_HS/CO_FL_EARLY_DATA are removed for BoringSSL. Early
data can be checked via BoringSSL API and ssl_fc_has_early can used it.
This should be backported to all versions till 1.8.
(cherry picked from commit c9858010c2b2b97ff3652baeeb52f6bc17b27cb7)
Signed-off-by: Willy Tarreau <w@1wt.eu>
diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index f07cce5..c1a4566 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -6560,9 +6560,16 @@
smp->flags = 0;
smp->data.type = SMP_T_BOOL;
+#ifdef OPENSSL_IS_BORINGSSL
+ {
+ struct ssl_sock_ctx *ctx = conn->xprt_ctx;
+ smp->data.u.sint = (SSL_in_early_data(ctx->ssl) &&
+ SSL_early_data_accepted(ctx->ssl));
+ }
+#else
smp->data.u.sint = ((conn->flags & CO_FL_EARLY_DATA) &&
(conn->flags & (CO_FL_EARLY_SSL_HS | CO_FL_HANDSHAKE))) ? 1 : 0;
-
+#endif
return 1;
}