File 2014_openssl1.1.1_sni.patch of Package scl-php71-libc-client

Overview Repositories Revisions Requests Users Attributes Meta

File 2014_openssl1.1.1_sni.patch of Package scl-php71-libc-client

From 33fab3562261fa48279db73a80c1626c288a7119 Mon Sep 17 00:00:00 2001
From: Julian Brown <julian.brown@cpanel.net>
Date: Tue, 1 Oct 2019 15:07:04 -0500
Subject: [PATCH 2/2] 2014_openssl1.1.1_sni

---
 src/osdep/unix/ssl_unix.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/osdep/unix/ssl_unix.c b/src/osdep/unix/ssl_unix.c
index c699640..a01769c 100644
--- a/src/osdep/unix/ssl_unix.c
+++ b/src/osdep/unix/ssl_unix.c
@@ -266,6 +266,14 @@ static char *ssl_start_work (SSLSTREAM *stream,char *host,unsigned long flags)
 				/* create connection */
   if (!(stream->con = (SSL *) SSL_new (stream->context)))
     return "SSL connection failed";
+#if OPENSSL_VERSION_NUMBER >= 0x10101000
+  /* Use SNI in case server requires it with TLSv1.3.
+   * Literal IP addresses not permitted per RFC 6066. */
+  if (!a2i_IPADDRESS(host)) {
+    ERR_clear_error();
+    SSL_set_tlsext_host_name(stream->con,host);
+  }
+#endif
   bio = BIO_new_socket (stream->tcpstream->tcpsi,BIO_NOCLOSE);
   SSL_set_bio (stream->con,bio,bio);
   SSL_set_connect_state (stream->con);
-- 
2.23.0

Places

File 2014_openssl1.1.1_sni.patch of Package scl-php71-libc-client

Places