Uploaded image for project: 'C Driver'
  1. C Driver
  2. CDRIVER-2378

Is SNI enabled with Secure Transport if allow_invalid_hostname is true?

    • Type: Icon: Task Task
    • Resolution: Unresolved
    • Priority: Icon: Minor - P4 Minor - P4
    • None
    • Affects Version/s: None
    • Component/s: tls

      In mongoc-stream-tls-secure-transport.c:

         if (!opt->allow_invalid_hostname) {
            SSLSetPeerDomainName (secure_transport->ssl_ctx_ref, host, strlen (host));
         }
      

      Does SNI still work then? Or have we made the same mistake as Curl and Chromium?:

      https://github.com/curl/curl/issues/998
      https://langui.sh/2010/02/24/sni-support-in-chromium-os-x/

            Assignee:
            Unassigned Unassigned
            Reporter:
            jesse@mongodb.com A. Jesse Jiryu Davis
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: