| commit | 281bf2332caa33184ad611f4f96b3f7fd44d1d29 | [log] [tgz] |
|---|---|---|
| author | Matt Caswell <matt@openssl.org> | Tue Nov 14 15:14:51 2017 +0000 |
| committer | Matt Caswell <matt@openssl.org> | Tue Nov 21 17:46:22 2017 +0000 |
| tree | 2932e81c9cfd0769f0f056e785e9e6b306863664 | |
| parent | 3b5873567d24bf0d8bc2a175848e716e295d6c94 [diff] |
If a server is not acknowledging SNI then don't reject early_data SNI needs to be consistent before we accept early_data. However a server may choose to not acknowledge SNI. In that case we have to expect that a client may send it anyway. We change the consistency checks so that not acknowledging is treated more a like a "wild card", accepting any SNI as being consistent. Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4738)