From 642b34e8d1738acee22050cf45c8142bfed9b9e2 Mon Sep 17 00:00:00 2001 From: Alexander Belkov Date: Wed, 27 Dec 2017 17:47:08 +1000 Subject: [PATCH] Extended OpenSSL compatibility Fixed SNI hostname check for SSL 1.1.0 --- src/plugins/SSLPlugin/my_ssl.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/plugins/SSLPlugin/my_ssl.c b/src/plugins/SSLPlugin/my_ssl.c index 3434674..28b60f2 100644 --- a/src/plugins/SSLPlugin/my_ssl.c +++ b/src/plugins/SSLPlugin/my_ssl.c @@ -216,7 +216,11 @@ SSL_CONN ssl_handshake_to_server(SOCKET s, char * hostname, SSL_CERT *server_cer ssl_conn_free(conn); return NULL; } - if(hostname && *hostname)SSL_set_tlsext_host_name(conn->ssl, hostname); + #ifdef SSL_set_tlsext_host_name + if(hostname && *hostname)SSL_set_tlsext_host_name(conn->ssl, hostname); + #else + if(hostname && *hostname) X509_VERIFY_PARAM_set1_host(SSL_get0_param(conn->ssl), hostname, 0); + #endif err = SSL_connect(conn->ssl); if ( err == -1 ) { *errSSL = ERR_error_string(ERR_get_error(), errbuf);