From 243664926f6d54ba933d00c1ac583e7d898c2bb4 Mon Sep 17 00:00:00 2001
From: Manuel Kasper <manuel.kasper@threema.ch>
Date: Mon, 23 Dec 2019 14:34:19 +0100
Subject: [PATCH] Enable TLS SNI

---
 src/tls_openssl.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/tls_openssl.c b/src/tls_openssl.c
index d948b32..fc1807a 100644
--- a/src/tls_openssl.c
+++ b/src/tls_openssl.c
@@ -153,6 +153,11 @@ tls_t *tls_new(xmpp_conn_t *conn)
         if (tls->ssl == NULL)
             goto err_free_ctx;
 
+#if OPENSSL_VERSION_NUMBER >= 0x10000000L
+        /* Enable SNI. */
+        SSL_set_tlsext_host_name(tls->ssl, conn->domain);
+#endif
+
         /* Trust server's certificate when user sets the flag explicitly. */
         mode = conn->tls_trust ? SSL_VERIFY_NONE : SSL_VERIFY_PEER;
         SSL_set_verify(tls->ssl, mode, 0);