File fetchmail-SNI-hostname-support.patch of Package fetchmail.4705

Overview Repositories Revisions Requests Users Attributes Meta

File fetchmail-SNI-hostname-support.patch of Package fetchmail.4705

From 9b8b634312f169fab872f3580c2febe5af031615 Mon Sep 17 00:00:00 2001
From: Matthias Andree <matthias.andree@gmx.de>
Date: Sat, 11 Feb 2017 19:39:56 +0100
Subject: [PATCH] TLS: set hostname for SNI.

---
 socket.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

Index: fetchmail-6.3.26/socket.c
===================================================================
--- fetchmail-6.3.26.orig/socket.c
+++ fetchmail-6.3.26/socket.c
@@ -987,6 +987,20 @@ int SSLOpen(int sock, char *mycert, char
 	_verify_ok = 1;
 	_prev_err = -1;
 
+	/*
+	 * Support SNI, some servers (googlemail) appear to require it.
+	 */
+	{
+	    long r;
+	    r = SSL_set_tlsext_host_name(_ssl_context[sock], servercname);
+
+	    if (0 == r) {
+		   /* handle error */
+		   report(stderr, GT_("Warning: SSL_set_tlsext_host_name(%p, \"%s\") failed (code %#lx), trying to continue.\n"), _ssl_context[sock], servercname, r);
+		   ERR_print_errors_fp(stderr);
+	    }
+	}
+
 	if( mycert || mykey ) {
 
 	/* Ok...  He has a certificate file defined, so lets declare it.  If

Places

File fetchmail-SNI-hostname-support.patch of Package fetchmail.4705

Places