shithub: tlssrv.sni

Info  •  Files  •  Log  •  Branches

Improve comment and relocate variable declaration.

--- a/tlshand.c

+++ b/tlshand.c

@@ -747,13 +747,15 @@

 	if(checkClientExtensions(c, m.u.clientHello.extensions) < 0)

 		goto Err;

 	if(certlen > 0){

-		/* override default server certificate with SNI (@igor) */

+		/* override default certificate using Server Name Identifier (SNI) extension */

 		if(c->serverName){

 			char path[512];

+			PEMChain *chain;

+

 			snprint(path, sizeof(path), "/sys/lib/tls/acmed/%s.crt", c->serverName);

 			if(trace)

-				trace("ClientHello server name indicator %s using %s\n", c->serverName, path);

-			PEMChain *chain = readcertchain(path);

+				trace("ClientHello extension server name identifier selects %s\n", path);

+			chain = readcertchain(path);

 			if (chain){

 				free(*cert);

 				*cert = chain->pem;