diff options
| author | Anderson Toshiyuki Sasaki <ansasaki@redhat.com> | 2018-04-19 13:17:21 +0200 |
|---|---|---|
| committer | Anderson Toshiyuki Sasaki <ansasaki@redhat.com> | 2018-04-23 13:10:54 +0200 |
| commit | 540e949ee54ad30ad485ac1aa6021f62cfa6cfed (patch) | |
| tree | a55efb7c4b87476379651be5e6cfe52612518886 | |
| parent | ce290c1260e6419a950d195068f50342780516aa (diff) | |
| download | gnutls-540e949ee54ad30ad485ac1aa6021f62cfa6cfed.tar.gz | |
gnutls-serv: send alert for unrecognized name
Backported fix to send alert for unrecognized name when an incorrect SNI
is received
Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
| -rw-r--r-- | src/serv.c | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/src/serv.c b/src/serv.c index f5ff48786d..8c7c92a921 100644 --- a/src/serv.c +++ b/src/serv.c @@ -1278,6 +1278,15 @@ int main(int argc, char **argv) return 0; } +int _gnutls_alert_send_appropriate (gnutls_session_t session, int err) +{ + if (err == _GNUTLS_E_UNRECOGNIZED_NAME) + return gnutls_alert_send(session, + GNUTLS_AL_FATAL, + GNUTLS_A_UNRECOGNIZED_NAME); + return gnutls_alert_send_appropriate(session, err); +} + static void retry_handshake(listener_item *j) { int r, ret; @@ -1293,7 +1302,7 @@ static void retry_handshake(listener_item *j) GERR(r); do { - ret = gnutls_alert_send_appropriate(j->tls_session, r); + ret = _gnutls_alert_send_appropriate(j->tls_session, r); } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); } else if (r == 0) { if (gnutls_session_is_resumed(j->tls_session) != 0 && verbose != 0) @@ -1326,7 +1335,7 @@ int r, ret; if (r < 0) { do { - ret = gnutls_alert_send_appropriate(j->tls_session, r); + ret = _gnutls_alert_send_appropriate(j->tls_session, r); } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); GERR(r); j->http_state = HTTP_STATE_CLOSING; |