summaryrefslogtreecommitdiff
path: root/src/lib/libssl/man/ssl.3
diff options
context:
space:
mode:
authortb <>2025-04-30 13:50:50 +0000
committertb <>2025-04-30 13:50:50 +0000
commit57fbc2fcc87151c9659e9408fe1bdd5dd553f16e (patch)
tree68bc21d0a48df674b4af12a7c63c4ad62eb45f8b /src/lib/libssl/man/ssl.3
parentc2fc132851c07f7761eae31f7a9e2d0393a48192 (diff)
downloadopenbsd-57fbc2fcc87151c9659e9408fe1bdd5dd553f16e.tar.gz
openbsd-57fbc2fcc87151c9659e9408fe1bdd5dd553f16e.tar.bz2
openbsd-57fbc2fcc87151c9659e9408fe1bdd5dd553f16e.zip
tlsext: stop sending SNI before ALPN in clients
All supported releases of LibreSSL ensure that the corresponding callbacks are called in a predefined order rather than honoring the order in which a client sends its extensions. Therefore the ALPN callback for apache-httpd's virtual host setups can rely on SNI information being available and we no longer need to work around this on hte client side. Cuts the amount of code needed for tlsext randomization in half. ok jsing
Diffstat (limited to 'src/lib/libssl/man/ssl.3')
0 files changed, 0 insertions, 0 deletions