From fc79815faf28b347f6f0b8dd6d7c4f6b83fc4e53 Mon Sep 17 00:00:00 2001 From: Andrew Dunham Date: Thu, 4 Sep 2014 18:21:43 -0700 Subject: Allow setting hostname to support TLS-SNI --- src/ssl/mod.rs | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) (limited to 'src/ssl/mod.rs') diff --git a/src/ssl/mod.rs b/src/ssl/mod.rs index 7c9b2d60..82301086 100644 --- a/src/ssl/mod.rs +++ b/src/ssl/mod.rs @@ -362,6 +362,29 @@ impl Ssl { None => unreachable!() } } + + /// Set the host name to be used with SNI (Server Name Indication). + pub fn set_hostname(&self, hostname: &str) -> Result<(), SslError> { + let ret = hostname.with_c_str(|hostname| { + unsafe { + // This is defined as a macro: + // #define SSL_set_tlsext_host_name(s,name) \ + // SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,(char *)name) + + ffi::SSL_ctrl(self.ssl, ffi::SSL_CTRL_SET_TLSEXT_HOSTNAME, + ffi::TLSEXT_NAMETYPE_host_name, + hostname as *const c_void as *mut c_void) + } + }); + + // For this case, 0 indicates failure. + if ret == 0 { + Err(SslError::get()) + } else { + Ok(()) + } + } + } #[deriving(FromPrimitive)] -- cgit v1.2.3