diff options
author | Andreas Sommer <andreas.sommer87@googlemail.com> | 2019-09-02 11:00:52 +0200 |
---|---|---|
committer | Jose <jose@zeroc.com> | 2019-09-06 18:51:54 +0200 |
commit | 4dd172445e316fd1456e343a487ae91eba9fb7b8 (patch) | |
tree | d05e4902030a1bd25f2a9b1c8eec91a0df1e59ab /cpp/src/IceSSL | |
parent | Implement server name indication (SNI) for IceSSL Java (diff) | |
download | ice-4dd172445e316fd1456e343a487ae91eba9fb7b8.tar.bz2 ice-4dd172445e316fd1456e343a487ae91eba9fb7b8.tar.xz ice-4dd172445e316fd1456e343a487ae91eba9fb7b8.zip |
Mark SChannel as always using SNI
Diffstat (limited to 'cpp/src/IceSSL')
-rw-r--r-- | cpp/src/IceSSL/SChannelEngine.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/cpp/src/IceSSL/SChannelEngine.cpp b/cpp/src/IceSSL/SChannelEngine.cpp index 770988c3e90..50e1b1240aa 100644 --- a/cpp/src/IceSSL/SChannelEngine.cpp +++ b/cpp/src/IceSSL/SChannelEngine.cpp @@ -1145,6 +1145,8 @@ SChannel::SSLEngine::getCipherName(ALG_ID cipher) const CredHandle SChannel::SSLEngine::newCredentialsHandle(bool incoming) { + // SNI support: SChannel will send the TLS extension even if SCH_CRED_SNI_CREDENTIAL (undocumented!) + // is not specified. Therefore, the IceSSL.ServerNameIndication property is not used here. SCHANNEL_CRED cred; memset(&cred, 0, sizeof(cred)); cred.dwVersion = SCHANNEL_CRED_VERSION; |