diff options
| author | Martin Willi <martin@revosec.ch> | 2011-04-14 19:42:32 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-04-14 20:02:12 +0200 |
| commit | 1c21f47a060bdc0460c535c800591eebf641f3ac (patch) | |
| tree | e807e6675cfa089a88f9ba2208ace911c9499c8a /src/libtls/tls_peer.c | |
| parent | eea2bdb203f5ef0da5764b1b83dfbbeabf984b26 (diff) | |
| download | strongswan-1c21f47a060bdc0460c535c800591eebf641f3ac.tar.bz2 strongswan-1c21f47a060bdc0460c535c800591eebf641f3ac.tar.xz | |
Send TLS Server Name Indication as peer if server identity is a FQDN
Diffstat (limited to 'src/libtls/tls_peer.c')
| -rw-r--r-- | src/libtls/tls_peer.c | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c index c1fd33eea..ae89153be 100644 --- a/src/libtls/tls_peer.c +++ b/src/libtls/tls_peer.c @@ -738,6 +738,20 @@ static status_t send_client_hello(private_tls_peer_t *this, extensions->write_uint8(extensions, 1); extensions->write_uint8(extensions, TLS_EC_POINT_UNCOMPRESSED); } + if (this->server->get_type(this->server) == ID_FQDN) + { + tls_writer_t *names; + + DBG2(DBG_TLS, "sending Server Name Indication for '%Y'", this->server); + + names = tls_writer_create(8); + names->write_uint8(names, TLS_NAME_TYPE_HOST_NAME); + names->write_data16(names, this->server->get_encoding(this->server)); + names->wrap16(names); + extensions->write_uint16(extensions, TLS_EXT_SERVER_NAME); + extensions->write_data16(extensions, names->get_buf(names)); + names->destroy(names); + } writer->write_data16(writer, extensions->get_buf(extensions)); extensions->destroy(extensions); |