diff options
| author | Matt Caswell <matt@openssl.org> | 2017-02-13 13:26:37 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-04-27 11:43:55 +0100 |
| commit | 11ba87f2ff8e2455c6627a83aa458384fe7de70a (patch) | |
| tree | cd641aa5f04e490b101ff22b287552f05cc48653 /CHANGES | |
| parent | 37659ea43053f5db951962bd1100b490bd4f7e5e (diff) | |
| download | openssl-11ba87f2ff8e2455c6627a83aa458384fe7de70a.tar.gz | |
Ensure s_client sends an SNI extension by default
Enforcement of an SNI extension in the initial ClientHello is becoming
increasingly common (e.g. see GitHub issue #2580). This commit changes
s_client so that it adds SNI be default, unless explicitly told not to via
the new "-noservername" option.
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2614)
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -49,6 +49,12 @@ *) Add support for ARIA [Paul Dale] + *) s_client will now send the Server Name Indication (SNI) extension by + default unless the new "-noservername" option is used. The server name is + based on the host provided to the "-connect" option unless overridden by + using "-servername". + [Matt Caswell] + *) Add support for SipHash [Todd Short] |