]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
dns-httpsrr-lookup: use origin, not peer
authorStefan Eissing <stefan@eissing.org>
Wed, 17 Jun 2026 09:50:35 +0000 (11:50 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 17 Jun 2026 10:04:49 +0000 (12:04 +0200)
Origin is the correct peer for lookup of HTTPS-RR records.

Closes #22059

lib/vtls/openssl.c
lib/vtls/rustls.c
lib/vtls/wolfssl.c

index eb6839cfba4b5d548d247ed0bcd8869161d355e6..4689d7a2fc933e76f6baef342eaf6a309665ee80 100644 (file)
@@ -3502,7 +3502,7 @@ static CURLcode ossl_init_ech(struct ossl_ctx *octx,
   }
   else {
     const struct Curl_https_rrinfo *rinfo =
-      Curl_conn_dns_get_https(data, cf->sockindex, peer->peer);
+      Curl_conn_dns_get_https(data, cf->sockindex, peer->origin);
 
     if(rinfo && rinfo->echconfiglist) {
       const unsigned char *ecl = rinfo->echconfiglist;
index 5183844a6fbd4b4879b146217d13b2b2cb296fce..950f17021239f7248933ef77aa67fc167f132dd5 100644 (file)
@@ -983,7 +983,7 @@ init_config_builder_ech(struct Curl_easy *data,
   else {
     const struct ssl_connect_data *connssl = cf->ctx;
     const struct Curl_https_rrinfo *rinfo =
-      Curl_conn_dns_get_https(data, cf->sockindex, connssl->peer.peer);
+      Curl_conn_dns_get_https(data, cf->sockindex, connssl->peer.origin);
 
     if(!rinfo || !rinfo->echconfiglist) {
       failf(data, "rustls: ECH requested but no ECHConfig available");
index c55490eb833f46b0e86bf9fdb21cfc1e255c7586..92eaa7a751009853c0dbed6369a7eb63e2f02261 100644 (file)
@@ -1248,7 +1248,7 @@ static CURLcode wssl_init_ech(struct wssl_ctx *wctx,
   }
   else {
     const struct Curl_https_rrinfo *rinfo =
-      Curl_conn_dns_get_https(data, cf->sockindex, peer->peer);
+      Curl_conn_dns_get_https(data, cf->sockindex, peer->origin);
 
     if(rinfo && rinfo->echconfiglist) {
       const unsigned char *ecl = rinfo->echconfiglist;