Add regress that calls SSL_set_tlsext_host_name() with a NULL host name.

1 files changed, 15 insertions, 1 deletions

diff --git a/src/regress/lib/libssl/tlsext/tlsexttest.c b/src/regress/lib/libssl/tlsext/tlsexttest.c
index 21e096cf60..9bd438f24b 100644
--- a/src/regress/lib/libssl/tlsext/tlsexttest.c
+++ b/src/regress/lib/libssl/tlsext/tlsexttest.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tlsexttest.c,v 1.52 2021/11/01 16:39:01 jsing Exp $ */
+/* $OpenBSD: tlsexttest.c,v 1.53 2021/11/02 14:39:09 jsing Exp $ */
 /*
  * Copyright (c) 2017 Joel Sing <jsing@openbsd.org>
  * Copyright (c) 2017 Doug Hogan <doug@openbsd.org>
@@ -1722,6 +1722,20 @@ test_tlsext_sni_client(void)
                 goto err;
         }
 
+        /*
+         * SSL_set_tlsext_host_name() may be called with a NULL host name to
+         * disable SNI.
+         */
+        if (!SSL_set_tlsext_host_name(ssl, NULL)) {
+                FAIL("cannot set host name to NULL");
+                goto err;
+        }
+
+        if (tlsext_sni_client_needs(ssl, SSL_TLSEXT_MSG_CH)) {
+                FAIL("client should not need SNI\n");
+                goto err;
+        }
+
         if ((ssl->session = SSL_SESSION_new()) == NULL) {
                 FAIL("failed to create session");
                 goto err;