Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 84d8eb08e15e455826ef66a4b1f1f61758cb9aba
      
https://github.com/tianocore/edk2/commit/84d8eb08e15e455826ef66a4b1f1f61758cb9aba
  Author: Sebastian Witt <sebastian.w...@siemens.com>
  Date:   2024-06-25 (Tue, 25 Jun 2024)

  Changed paths:
    M CryptoPkg/Library/TlsLib/TlsConfig.c

  Log Message:
  -----------
  CryptoPkg: Add SNI extension to TLS ClientHello

Webservers hosting multiple websites require the TLS SNI
(Server Name Indication) in the ClientHello to know which certificate
to return.
The current TLS code does not include the server name in the
ClientHello handshake, which leads to failed HTTPS boots when the
server does not return the correct certificate.

This sets the host name for SNI in TlsSetVerifyHost which receives the
host name also for verification against the certificates.

Signed-off-by: Sebastian Witt <sebastian.w...@siemens.com>



To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
edk2-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to