There is no reason to set the SNI for non-ssl connections. It is not really
an issue because ssl_sock_set_servername() function will do nothing. But
there is no reason to uselessly evaluate an expression.
No backport needed, because there is no bug.
#ifdef USE_OPENSSL
/* Set socket SNI unless connection is reused. */
- if (srv && srv->ssl_ctx.sni && !(s->flags & SF_SRV_REUSED)) {
+ if (conn_is_ssl(srv_conn) && srv && srv->ssl_ctx.sni && !(s->flags & SF_SRV_REUSED)) {
struct sample *sni_smp = NULL;
sni_smp = sample_fetch_as_type(s->be, s->sess, s,