Skip to content

Conversation

@pemensik
Copy link
Contributor

Fedora in FIPS mode might fail to initialize ngtcp2 library, because some ciphers desired are not available.

Make it possible to skip initialization by setting explicitly quic_port to 0. Unless we have some listeners for port 853 configured, skip its initialization as well.

Related: https://pagure.io/freeipa/issue/9877

Fedora in FIPS mode might fail to initialize ngtcp2 library, because
some ciphers desired are not available.

Make it possible to skip initialization by setting explicitly quic_port
to 0. Unless we have some listeners for port 853 configured, skip its
initialization as well.

Related: https://pagure.io/freeipa/issue/9877
@pemensik
Copy link
Contributor Author

I have made it possible to disable QUIC usage by: quic-port: 0. I think it were not possible to serve only TLS on port 853 when QUIC support was built-in. I thought initially there is no better config check. But then found there is already function to check quic is used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant