Uploaded image for project: 'C Driver'
  1. C Driver
  2. CDRIVER-2378

Is SNI enabled with Secure Transport if allow_invalid_hostname is true?

    XMLWordPrintableJSON

Details

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Minor - P4 Minor - P4
    • None
    • None
    • tls

    Description

      In mongoc-stream-tls-secure-transport.c:

         if (!opt->allow_invalid_hostname) {
            SSLSetPeerDomainName (secure_transport->ssl_ctx_ref, host, strlen (host));
         }
      

      Does SNI still work then? Or have we made the same mistake as Curl and Chromium?:

      https://github.com/curl/curl/issues/998
      https://langui.sh/2010/02/24/sni-support-in-chromium-os-x/

      Attachments

        Activity

          People

            Unassigned Unassigned
            jesse@mongodb.com A. Jesse Jiryu Davis
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: