devs/libstrophe-gh
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enable TLS SNI

Browse Source
This commit is contained in:
Manuel Kasper
2019-12-23 14:34:19 +01:00
parent 466fa2adbf
commit 243664926f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/tls_openssl.c
View File

@@ -153,6 +153,11 @@ tls_t *tls_new(xmpp_conn_t *conn)
if (tls->ssl == NULL) if (tls->ssl == NULL)
goto err_free_ctx; goto err_free_ctx;
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
/* Enable SNI. */
SSL_set_tlsext_host_name(tls->ssl, conn->domain);
#endif
/* Trust server's certificate when user sets the flag explicitly. */ /* Trust server's certificate when user sets the flag explicitly. */
mode = conn->tls_trust ? SSL_VERIFY_NONE : SSL_VERIFY_PEER; mode = conn->tls_trust ? SSL_VERIFY_NONE : SSL_VERIFY_PEER;
SSL_set_verify(tls->ssl, mode, 0); SSL_set_verify(tls->ssl, mode, 0);