Question in 1.3 babassl compiles possible?

[osevan]

I read this:

"Support for NTLS in the HTTP and stream modules when using the TongSuo TLS library; the support can be enabled via the ‑‑with‑ntls build time option and configured with the corresponding ssl_ntls and proxy_ssl_ntls directives."

Which compile flag enables babassl?

And can we use babassl with quic too?

Thanks and

Best regards

[VBart]

Thanks for your interest.

Please check the ssl_ntls documentation: https://angie.software/en/http_ssl/#ssl-ntls It has the compilation flags example:

./configure --with-openssl=../Tongsuo-8.3.0 \
            --with-openssl-opt=enable-ntls  \
            --with-ntls

where ../Tongsuo-8.3.0 is a path to Tongsuo/BabaSSL sources directory.

And can we use babassl with quic too?

Yes.

[osevan]

Woow Thanks for fast answer.

Any benefits in handshakes completion compared to openssl quic version of google?

[VBart]

OpenSSL doesn't support QUIC natively. Support for OpenSSL is implemented using special compatibility wrapper and as a result QUIC connections migration isn't supported with OpenSSL.

AFAIK, Tongsuo implementation is based on BoringSSL API, so it should support all the QUIC features natively, including the connections migration.

[osevan]

But any benefits?

Faster connections time?

[VBart]

I believe no benefits in connections time over BoringSSL. But it's better to address this question to TongSuo authors.