KSSL: Set hostname in TLSext to enable SNI support

Signed-off-by: Slávek Banko <slavek.banko@axis.cz> (cherry picked from commit 45cf7d13eb)
8 years ago · f23de663bb
parent f83e4b4741
commit f23de663bb
1 changed files with 6 additions and 0 deletions
--- a/tdeio/kssl/kssl.cc
+++ b/tdeio/kssl/kssl.cc
@ -329,6 +329,9 @@ int rc;
 		d->m_ssl = 0;
 		return rc;
 	}
+#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
+	d->kossl->SSL_set_tlsext_host_name(d->m_ssl, d->proxyPeer.ascii());
+#endif

 	rc = d->kossl->SSL_accept(d->m_ssl);
 	if (rc == 1) {
@ -424,6 +427,9 @@ int rc;
 		d->m_ssl = 0;
 		return rc;
 	}
+#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
+	d->kossl->SSL_set_tlsext_host_name(d->m_ssl, d->proxyPeer.ascii());
+#endif

 connect_again:
 	rc = d->kossl->SSL_connect(d->m_ssl);