diff options
author | jsing <> | 2021-11-01 16:37:17 +0000 |
---|---|---|
committer | jsing <> | 2021-11-01 16:37:17 +0000 |
commit | e7fdd9de6f9def3087be965eae19cc67a8da47dd (patch) | |
tree | a3c71ae24931ccb437c44d27f9d1ed00b1095976 /src/lib/libc | |
parent | a70e39e12d0c283caba589c494e6ab2aad779422 (diff) | |
download | openbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.tar.gz openbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.tar.bz2 openbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.zip |
Improve SNI hostname validation.
For some time now we've validated the hostname provided to the server in
the SNI extension. Per RFC 6066, an IP literal is invalid as a hostname -
the current code rejects IPv6 literals, but allows IPv4 literals through.
Improve this check to explicitly detect both IPv4 and IPv6 literals. Some
software has been historically known to include IP literals in SNI, so
rather than rejecting this outright (and failing with a decode error),
pretend that the SNI extension does not exist (such that we do not break
some older clients).
ok inoguchi@ tb@
Diffstat (limited to 'src/lib/libc')
0 files changed, 0 insertions, 0 deletions