mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 05:57:52 +00:00
Code Issues Releases Wiki Activity

Dig: carefully check if the server name for SNI is a hostname

Browse Source 
Previously the code would not check if the string intended to be used
for SNI is a hostname.

(cherry picked from commit 16a306687a2049dff0bb4139165fc22381905643)
This commit is contained in:
Artem Boldariev 2025-03-14 21:35:39 +02:00
parent 634625be07
commit d6c92d3f07
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
bin/dig/dighost.c
View File

@ -2793,8 +2793,19 @@ _cancel_lookup(dig_lookup_t *lookup, const char *file, unsigned int line) {
static inline const char *
get_tls_sni_hostname(dig_query_t *query) {
return query->lookup->tls_hostname_set ? query->lookup->tls_hostname
: query->userarg;
const char *hostname = query->lookup->tls_hostname_set
? query->lookup->tls_hostname
: query->userarg;
if (query->lookup->tls_hostname_set) {
return query->lookup->tls_hostname;
}
if (isc_tls_valid_sni_hostname(hostname)) {
return hostname;
}
return NULL;
}
static isc_tlsctx_t *