]> git.ipfire.org Git - thirdparty/squid.git/commit
Fixed parsing of server-sent SNI.
authorAlex Rousskov <rousskov@measurement-factory.com>
Fri, 29 Apr 2016 00:27:45 +0000 (18:27 -0600)
committerAlex Rousskov <rousskov@measurement-factory.com>
Fri, 29 Apr 2016 00:27:45 +0000 (18:27 -0600)
commitfc34b43d2939da581ac21d8ac2d097dabfb4866e
tree60dbd1ec598aeabfb8b73fa8811684311ef37f96
parent21f081e26c63147bdf359b6bde296d346de718f2
Fixed parsing of server-sent SNI.

The old code could not handle an empty SNI extension that most servers
send. RFC 6066 prose instructs servers to send empty SNI extensions, and
the formal SNI grammar is apparently client-specific. We are not the
only ones being confused by that because there are severs that send
empty ServerNameLists, which are actually prohibited by the grammar.
src/security/Handshake.cc