mirror/mongoose
1
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2025-06-17 16:01:52 +08:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

Enable server name verification on mbedTLS

Browse Source 
PUBLISHED_FROM=54774944d5402a5d6a351b4609428940c0ad20ea
This commit is contained in:
Deomid Ryabkov 2016-11-28 10:39:14 +02:00 committed by Cesanta Bot
parent e17fdcb077
commit 7776df241c
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
mongoose.c
View File

@ -4370,10 +4370,6 @@ enum mg_ssl_if_result mg_ssl_if_conn_init(
return MG_SSL_ERROR; return MG_SSL_ERROR;
} }
if (params->server_name != NULL) {
/* TODO(rojer): Implement server name verification on mbedTLS. */
}
mg_set_cipher_list(ctx, NULL); mg_set_cipher_list(ctx, NULL);
if (!(nc->flags & MG_F_LISTENING)) { if (!(nc->flags & MG_F_LISTENING)) {
@ -4383,6 +4379,10 @@ enum mg_ssl_if_result mg_ssl_if_conn_init(
MG_SET_PTRPTR(err_msg, "Failed to create SSL session"); MG_SET_PTRPTR(err_msg, "Failed to create SSL session");
return MG_SSL_ERROR; return MG_SSL_ERROR;
} }
if (params->server_name != NULL &&
mbedtls_ssl_set_hostname(ctx->ssl, params->server_name) != 0) {
return MG_SSL_ERROR;
}
} }
nc->flags |= MG_F_SSL; nc->flags |= MG_F_SSL;