commit d0a8551703ee77b09820e359f2229476cb1dd038
parent 6a874b5877e5e0b211f844daa5148b372bde801e
Author: Oswald Buddenhagen <ossi@users.sf.net>
Date: Sun, 28 Jul 2019 13:33:12 +0200
fix error handling of SSL_set_tlsext_host_name()
it is not one of the functions to be checked with SSL_get_error().
amends 17babc169.
Diffstat:
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/src/socket.c b/src/socket.c
@@ -317,8 +317,11 @@ socket_start_tls( conn_t *conn, void (*cb)( int ok, void *aux ) )
start_tls_p3( conn, 0 );
return;
}
- if (ssl_return( "set server name", conn, SSL_set_tlsext_host_name( conn->ssl, conn->conf->host ) ) < 0)
+ if (!SSL_set_tlsext_host_name( conn->ssl, conn->conf->host )) {
+ print_ssl_errors( "setting SSL server host name" );
+ start_tls_p3( conn, 0 );
return;
+ }
if (!SSL_set_fd( conn->ssl, conn->fd )) {
print_ssl_errors( "setting SSL socket fd" );
start_tls_p3( conn, 0 );