commit 17babc1695e82ca80d032b79e920fcb86ede2347
Author: Oswald Buddenhagen <[email protected]>
Date: Sat Sep 8 18:36:16 2018 +0200
use SNI when connecting with SSL
based on patch by Vincent Bernat <[email protected]>.
src/socket.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/socket.c b/src/socket.c
index dd79619..e3fda42 100644
--- a/src/socket.c
+++ b/src/socket.c
@@ -271,6 +271,8 @@ socket_start_tls( conn_t *conn, void (*cb)( int ok, void
*aux ) )
init_wakeup( &conn->ssl_fake, ssl_fake_cb, conn );
conn->ssl = SSL_new( ((server_conf_t *)conn->conf)->SSLContext );
+ if (ssl_return( "set server name", conn, SSL_set_tlsext_host_name(
conn->ssl, conn->conf->host ) ) < 0)
+ return;
SSL_set_fd( conn->ssl, conn->fd );
SSL_set_mode( conn->ssl, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER );
socket_expect_read( conn, 1 );
_______________________________________________
isync-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/isync-devel
