]> git.ipfire.org Git - thirdparty/openssl.git/commit
Ignore the session when setting SNI in s_client
authorMatt Caswell <matt@openssl.org>
Tue, 14 Nov 2017 13:43:42 +0000 (13:43 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 21 Nov 2017 17:46:22 +0000 (17:46 +0000)
commitb510b740fb4e3cb35e6f297c232c0e776dbcbc71
tree9a09541f64b2eb719a1a08f9f5b5018e1db18749
parent665d899fa6d3571da016925067ebcf1789d7d19c
Ignore the session when setting SNI in s_client

As per this comment:

https://github.com/openssl/openssl/issues/4496#issuecomment-337767145

Since the server is entitled to reject our session our ClientHello
should include everything that we would want if a full handshake were
to happen. Therefore we shouldn't use the session as a source of
information for setting SNI.

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4738)
apps/s_client.c
test/recipes/70-test_sslmessages.t
test/recipes/70-test_tls13messages.t