]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: use ssl_sock_chose_sni_ctx() in the clienthello callback
authorWilliam Lallemand <wlallemand@haproxy.com>
Thu, 23 Nov 2023 16:54:47 +0000 (17:54 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Fri, 24 Nov 2023 19:07:27 +0000 (20:07 +0100)
commit77a97536e8878ff0ddcd08cde16e9e54a9c226e1
tree2682ffbc4db0aad9b770f428ecaee31e707b9fd3
parent9f2e07bf7b01dd32dcbc55d1452b7d50ac2c911d
MEDIUM: ssl: use ssl_sock_chose_sni_ctx() in the clienthello callback

This patch removes the code which selects the SSL certificate in the
OpenSSL Client Hello callback, to use the ssl_sock_chose_sni_ctx()
function which does the same.

The bigger part of the function which remains is the extraction of the
servername, ciphers and sigalgs, because it's done manually by parsing
the TLS extensions.

This is not supposed to change anything functionally.
src/ssl_sock.c