From 9b8b634312f169fab872f3580c2febe5af031615 Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Sat, 11 Feb 2017 19:39:56 +0100 Subject: TLS: set hostname for SNI. --- socket.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/socket.c b/socket.c index aec319e3..17d60cbd 100644 --- a/socket.c +++ b/socket.c @@ -1156,6 +1156,20 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck _verify_ok = 1; _prev_err = -1; + /* + * Support SNI, some servers (googlemail) appear to require it. + */ + { + long r; + r = SSL_set_tlsext_host_name(_ssl_context[sock], servercname); + + if (0 == r) { + /* handle error */ + report(stderr, GT_("Warning: SSL_set_tlsext_host_name(%p, \"%s\") failed (code %#lx), trying to continue.\n"), _ssl_context[sock], servercname, r); + ERR_print_errors_fp(stderr); + } + } + if( mycert || mykey ) { /* Ok... He has a certificate file defined, so lets declare it. If -- cgit v1.2.3