5 Commits

Author	SHA1	Message	Date
Ivan Grokhotkov	9eaeca3a03	Postpone freeing of X509 context to the first data exchange after handshake ... X509 context contains certificate fingerprint and various names which may be used to verify the certificate. Previously we would free it right after the handshake completion, which prevented the client from actually using any information from X509 context. Postponing this to the first ssl_read/ssl_write call after the handshake, we give the client a chance to verify the certificate. Also added logging to ssl_match_fingerprint function in case fingerprint doesn't match expected value.	2016-02-26 16:21:09 +03:00
Slavey Karadzhov	1154d0a985	Changed the code to reserve bytes for hostname only if needed.	2016-02-22 10:16:01 +01:00
Slavey Karadzhov	63da8991c2	Added SNI ( https://en.wikipedia.org/wiki/Server_Name_Indication ) support.	2016-02-19 16:48:58 +01:00
Ivan Grokhotkov	10b41c811a	Increase plaintext buffer size after handshake is complete	2015-11-17 01:50:35 +03:00
Ivan Grokhotkov	4e0ccaf9b2	Import axTLS 1.4.9	2015-08-30 13:34:00 +03:00