romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-24 11:03:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

darwinssl: Warn that disabling host verify also disables SNI

Browse source 
In DarwinSSL the SSLSetPeerDomainName function is used to enable both
sending SNI and verifying the host. When host verification is disabled
the function cannot be called, therefore SNI is disabled as well.

Closes https://github.com/curl/curl/pull/1240
This commit is contained in:
JDepooter 2017-02-02 13:40:16 -08:00 • committed by Jay Satiro
parent a162d8b21b
commit 0966ab5bd4
2 changed files with 13 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/vtls/darwinssl.c
View file

@ -1425,6 +1425,9 @@ static CURLcode darwinssl_connect_step1(struct connectdata *conn,
"the OS.\n");
}
}
else {
infof(data, "WARNING: disabling hostname validation also disables SNI.\n");
}
/* Disable cipher suites that ST supports but are not safe. These ciphers
are unlikely to be used in any case since ST gives other ciphers a much