romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-03 20:30:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

move AWSLC check for HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN into

Browse source 
common location.
This commit is contained in:
Stefan Eissing 2025-08-30 13:02:09 +02:00
parent de2a081bd4
commit 138dfd2959
No known key found for this signature in database
1 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

16
lib/vtls/openssl.c
View file

@ -121,8 +121,15 @@
static void ossl_provider_cleanup(struct Curl_easy *data); static void ossl_provider_cleanup(struct Curl_easy *data);
#endif #endif
/*
* AWS-LC has `SSL_CTX_set_default_read_buffer_len()?` but runs into
* decryption failures with large buffers. Sporadic failures in
* test_10_08 with h2 proxy uploads, increased frequency
* with CURL_DBG_SOCK_RBLOCK=50. Looks like a bug on their part.
*/
#if OPENSSL_VERSION_NUMBER >= 0x10100000L && \ #if OPENSSL_VERSION_NUMBER >= 0x10100000L && \
!defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL) !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL) && \
!defined(OPENSSL_IS_AWSLC)
#define HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN 1 #define HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN 1
#endif #endif
@ -4128,13 +4135,8 @@ CURLcode Curl_ossl_ctx_init(struct ossl_ctx *octx,
However using a large buffer (8 packets) actually decreases performance. However using a large buffer (8 packets) actually decreases performance.
4 packets is better. 4 packets is better.
AWS-LC seems to run into decryption failures with large buffers.
Sporadic failures in test_10_08 with h2 proxy uploads, increased
frequency with CURL_DBG_SOCK_RBLOCK=50.
*/ */
#if defined(HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN) && \ #ifdef HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN
!defined(OPENSSL_IS_AWSLC)
SSL_CTX_set_default_read_buffer_len(octx->ssl_ctx, 0x401e * 4); SSL_CTX_set_default_read_buffer_len(octx->ssl_ctx, 0x401e * 4);
#endif #endif