summaryrefslogtreecommitdiff
path: root/src/lib/libc
diff options
context:
space:
mode:
authorjsing <>2021-11-01 16:37:17 +0000
committerjsing <>2021-11-01 16:37:17 +0000
commite7fdd9de6f9def3087be965eae19cc67a8da47dd (patch)
treea3c71ae24931ccb437c44d27f9d1ed00b1095976 /src/lib/libc
parenta70e39e12d0c283caba589c494e6ab2aad779422 (diff)
downloadopenbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.tar.gz
openbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.tar.bz2
openbsd-e7fdd9de6f9def3087be965eae19cc67a8da47dd.zip
Improve SNI hostname validation.
For some time now we've validated the hostname provided to the server in the SNI extension. Per RFC 6066, an IP literal is invalid as a hostname - the current code rejects IPv6 literals, but allows IPv4 literals through. Improve this check to explicitly detect both IPv4 and IPv6 literals. Some software has been historically known to include IP literals in SNI, so rather than rejecting this outright (and failing with a decode error), pretend that the SNI extension does not exist (such that we do not break some older clients). ok inoguchi@ tb@
Diffstat (limited to 'src/lib/libc')
0 files changed, 0 insertions, 0 deletions