Enable the upper layer protocol to specify the SNI peername. This avoids the need for tlshd to use a DNS lookup, which can return a hostname that doesn't match the incoming certificate's SubjectName.
Showing the changes to include/uapi (1 of 5 files). Show all
Unified · Split
| @@ -44,6 +44,7 @@ enum { · 43 unmodified lines | ||
| 44 | 44 | HANDSHAKE_A_ACCEPT_AUTH_MODE, |
| 45 | 45 | HANDSHAKE_A_ACCEPT_PEER_IDENTITY, |
| 46 | 46 | HANDSHAKE_A_ACCEPT_CERTIFICATE, |
| 47 | + HANDSHAKE_A_ACCEPT_PEERNAME, | |
| 47 | 48 | |
| 48 | 49 | __HANDSHAKE_A_ACCEPT_MAX, |
| 49 | 50 | HANDSHAKE_A_ACCEPT_MAX = (__HANDSHAKE_A_ACCEPT_MAX - 1) |