Home
last modified time | relevance | path

Searched hist:1921 (Results 1 – 2 of 2) sorted by relevance

/unit/src/
H A Dnxt_openssl.cdiff 1921:b0deb6fa9219 Thu Jul 22 18:23:00 UTC 2021 Andrey Suvorov <a.suvorov@f5.com> Changing SNI callback return code if a client sends no SNI.

When a client sends no SNI is a common situation. But currently the server
processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing
termination of a current TLS session. The problem occurs if configuration has
more than one certificate bundle in a listener.

This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a
message.
/unit/docs/
H A Dchanges.xmldiff 1921:b0deb6fa9219 Thu Jul 22 18:23:00 UTC 2021 Andrey Suvorov <a.suvorov@f5.com> Changing SNI callback return code if a client sends no SNI.

When a client sends no SNI is a common situation. But currently the server
processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing
termination of a current TLS session. The problem occurs if configuration has
more than one certificate bundle in a listener.

This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a
message.