summaryrefslogtreecommitdiff
path: root/lib/vtls/sectransp.c
diff options
context:
space:
mode:
authorHarry Sintonen <sintonen@iki.fi>2022-05-06 16:25:19 +0200
committerDaniel Stenberg <daniel@haxx.se>2022-05-06 16:25:20 +0200
commit4fc35c829c300f978743a9bc56aa07fa47dc4337 (patch)
tree755527e009937cd7640623723982cbd161f754e2 /lib/vtls/sectransp.c
parenta8a1dd8ecc1e853953e7dcbca282c60454ffaaec (diff)
downloadcurl-4fc35c829c300f978743a9bc56aa07fa47dc4337.tar.gz
sectransp: bail out if SSLSetPeerDomainName fails
Before the code would just warn about SSLSetPeerDomainName() errors. Closes #8798
Diffstat (limited to 'lib/vtls/sectransp.c')
-rw-r--r--lib/vtls/sectransp.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/vtls/sectransp.c b/lib/vtls/sectransp.c
index 8ee8fe997..2e57d8378 100644
--- a/lib/vtls/sectransp.c
+++ b/lib/vtls/sectransp.c
@@ -2045,8 +2045,9 @@ static CURLcode sectransp_connect_step1(struct Curl_easy *data,
err = SSLSetPeerDomainName(backend->ssl_ctx, snihost, snilen);
if(err != noErr) {
- infof(data, "WARNING: SSL: SSLSetPeerDomainName() failed: OSStatus %d",
+ failf(data, "SSL: SSLSetPeerDomainName() failed: OSStatus %d",
err);
+ return CURLE_SSL_CONNECT_ERROR;
}
if((Curl_inet_pton(AF_INET, hostname, &addr))