bneradt opened a new pull request, #13919: URL: https://github.com/apache/trafficserver/pull/13919
With the native OpenSSL QUIC backend, the ClientHello callback runs before the QUIC NetVC exists, so TS_SSL_CLIENT_HELLO_HOOK never fired and JA3/JA4 fingerprinting plugins logged nothing for HTTP/3. Keep a copy of the ClientHello from the callback and run the hooks from the NetVC before starting the application. JA4 now reports q for QUIC, and ja3_fingerprint uses the TSClientHello API so it can read the copy. HQSession also never set its mutex, so any TS_HTTP_SSN_START_HOOK crashed traffic_server on every HTTP/3 connection. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
