Skip to content

Commit d779fe2

Browse files
committed
Allow SSL_TLSEXT_ERR_NOACK from servername callback
1 parent 0f9bf7e commit d779fe2

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

src/callbacks.rs

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,9 @@ impl ServerNameCallbackConfig {
160160

161161
match result {
162162
SSL_TLSEXT_ERR_OK => Ok(()),
163+
// in practice no client does anything if SNI is not acked, and rustls
164+
// acks any syntactically valid extension (and ignores invalid ones, because OpenSSL)
165+
SSL_TLSEXT_ERR_NOACK => Ok(()),
163166
_ => Err(Error::not_supported(
164167
"SSL_CTX_servername_callback_func return error",
165168
)),

0 commit comments

Comments
 (0)