Ensure s_client sends an SNI extension by default
authorMatt Caswell <matt@openssl.org>
Mon, 13 Feb 2017 13:26:37 +0000 (13:26 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 27 Apr 2017 10:43:55 +0000 (11:43 +0100)
commit11ba87f2ff8e2455c6627a83aa458384fe7de70a
treecd641aa5f04e490b101ff22b287552f05cc48653
parent37659ea43053f5db951962bd1100b490bd4f7e5e
Ensure s_client sends an SNI extension by default

Enforcement of an SNI extension in the initial ClientHello is becoming
increasingly common (e.g. see GitHub issue #2580). This commit changes
s_client so that it adds SNI be default, unless explicitly told not to via
the new "-noservername" option.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2614)
CHANGES
apps/s_client.c
doc/man1/s_client.pod
test/recipes/70-test_sslmessages.t
test/recipes/70-test_tls13messages.t
test/testlib/checkhandshake.pm