From: Eugene Syromiatnikov <esyr@openssl.org>
Date: Sat, 27 Jun 2026 10:42:27 +0000 (+0200)
Subject: demos/sslecho/echecho.c: use SSL_set1_ipaddr() instead of SSL_set1_host()
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7a4522bf2607f6fa9136273d375c71d78e6e8cbc;p=thirdparty%2Fopenssl.git

demos/sslecho/echecho.c: use SSL_set1_ipaddr() instead of SSL_set1_host()

As the latter was deprecated in commit f584ae959cbc "Let's support
multiple names for certificate verification".

Complements: 50580382caca "Documents initial agreed APIs for Encrypted Client Hello (ECH) and includes a minimal demo for some of those APIs."
Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Bob Beck <beck@openssl.org>
MergeDate: Mon Jul 20 11:19:00 2026
(Merged from https://github.com/openssl/openssl/pull/31751)
---

diff --git a/demos/sslecho/echecho.c b/demos/sslecho/echecho.c
index 2e300b95a1e..c8dc57b2631 100644
--- a/demos/sslecho/echecho.c
+++ b/demos/sslecho/echecho.c
@@ -336,7 +336,7 @@ int main(int argc, char **argv)
         /* Set hostname for SNI */
         SSL_set_tlsext_host_name(ssl, rem_server_ip);
         /* Configure server hostname check */
-        SSL_set1_host(ssl, rem_server_ip);
+        SSL_set1_ipaddr(ssl, rem_server_ip);
 
         /* Now do SSL connect with server */
         if (SSL_connect(ssl) == 1) {