mirror of
https://github.com/nghttp2/nghttp2.git
synced 2025-12-06 18:18:52 +08:00
nghttpx: Fix the bug that no-http2-cipher-black-list does not work
Because of the redundant check in backend HTTP/2 session, no-http2-cipher-black-list does not work on backend HTTP/2 connection. This commit fixes it.
This commit is contained in:
@@ -1702,24 +1702,9 @@ int Http2Session::connection_made() {
|
|||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
|
||||||
auto must_terminate =
|
|
||||||
addr_->tls && !nghttp2::ssl::check_http2_requirement(conn_.tls.ssl);
|
|
||||||
|
|
||||||
reset_connection_check_timer(CONNCHK_TIMEOUT);
|
reset_connection_check_timer(CONNCHK_TIMEOUT);
|
||||||
|
|
||||||
if (must_terminate) {
|
submit_pending_requests();
|
||||||
if (LOG_ENABLED(INFO)) {
|
|
||||||
LOG(INFO) << "TLSv1.2 was not negotiated. HTTP/2 must not be negotiated.";
|
|
||||||
}
|
|
||||||
|
|
||||||
rv = terminate_session(NGHTTP2_INADEQUATE_SECURITY);
|
|
||||||
|
|
||||||
if (rv != 0) {
|
|
||||||
return -1;
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
submit_pending_requests();
|
|
||||||
}
|
|
||||||
|
|
||||||
signal_write();
|
signal_write();
|
||||||
return 0;
|
return 0;
|
||||||
|
|||||||
Reference in New Issue
Block a user