From 0cf3728ca0d3e3f272e8d0bb147ca456845de352 Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Fri, 7 Nov 2025 16:50:41 -0700
Subject: [PATCH] update "--enable-jni --enable-all" combo to exclude QUIC and
 ECH, not compatible with WOLFSSL_TLS13_MIDDLEBOX_COMPAT

---
 configure.ac | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index e36fe0aae..082906b94 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1087,7 +1087,8 @@ then
 
     if test "$ENABLED_LINUXKM_DEFAULTS" != "yes"
     then
-        test "$enable_quic" = "" && test "$enable_cryptonly" != "yes" && enable_quic=yes
+        # Disable QUIC with JNI since incompatible with WOLFSSL_TLS13_MIDDLEBOX_COMPAT
+        test "$enable_quic" = "" && test "$enable_cryptonly" != "yes" && test "$enable_jni" != "yes" && enable_quic=yes
         AM_CFLAGS="$AM_CFLAGS -DHAVE_CRL_IO -DHAVE_IO_TIMEOUT"
     fi
 
@@ -1104,7 +1105,8 @@ then
 
     if test "$ENABLED_FIPS" = "no"
     then
-        test "$enable_ech" = "" && enable_ech=yes
+        # Disable ECH with JNI since incompatible with WOLFSSL_TLS13_MIDDLEBOX_COMPAT
+        test "$enable_ech" = "" && test "$enable_jni" != "yes" && enable_ech=yes
         test "$enable_scep" = "" && enable_scep=yes
         test "$enable_mcast" = "" && enable_mcast=yes
     fi