diff options
| author | Andrey Suvorov <a.suvorov@f5.com> | 2021-07-22 11:23:48 -0700 |
|---|---|---|
| committer | Andrey Suvorov <a.suvorov@f5.com> | 2021-07-22 11:23:48 -0700 |
| commit | f965e358b6ca878ead629dffb2f0df57230995ea (patch) | |
| tree | 047c668d5ccb94f62dad35ac27e2478e330c42e0 /src/nxt_clang.h | |
| parent | c37ff7ed0ed06b0e928efdb217a8999ff3ff7f50 (diff) | |
| download | unit-f965e358b6ca878ead629dffb2f0df57230995ea.tar.gz unit-f965e358b6ca878ead629dffb2f0df57230995ea.tar.bz2 | |
Changing SNI callback return code if a client sends no SNI.
When a client sends no SNI is a common situation. But currently the server
processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing
termination of a current TLS session. The problem occurs if configuration has
more than one certificate bundle in a listener.
This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a
message.
Diffstat (limited to 'src/nxt_clang.h')
0 files changed, 0 insertions, 0 deletions