f

Signed-off-by: Nic <[email protected]>

Author: nic-6443

patch/1.21.4/ngx_stream_lua-ssl_session_hostname.patch

@@ -0,0 +1,54 @@
+diff --git src/ngx_stream_lua_ssl_certby.c src/ngx_stream_lua_ssl_certby.c
+index 7b4cc5b..a67386d 100644
+--- src/ngx_stream_lua_ssl_certby.c
++++ src/ngx_stream_lua_ssl_certby.c
+@@ -882,6 +882,49 @@ ngx_stream_lua_ffi_ssl_server_name(ngx_stream_lua_request_t *r, char **name,
+ }
+ 
+ 
++int
++ngx_stream_lua_ffi_ssl_session_hostname(ngx_stream_request_t *r, char **name,
++    size_t *namelen, char **err)
++{
++    ngx_ssl_conn_t          *ssl_conn;
++
++    if (r->connection == NULL || r->connection->ssl == NULL) {
++        *err = "bad request";
++        return NGX_ERROR;
++    }
++
++    ssl_conn = r->connection->ssl->connection;
++    if (ssl_conn == NULL) {
++        *err = "bad ssl conn";
++        return NGX_ERROR;
++    }
++
++#if (defined(TLS1_3_VERSION)                                                   \
++     && !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL))
++
++    /*
++     * SSL_SESSION_get0_hostname() is only available in OpenSSL 1.1.1+,
++     * but servername being negotiated in every TLSv1.3 handshake
++     * is only returned in OpenSSL 1.1.1+ as well
++     */
++
++    SSL_SESSION *sess = SSL_get0_session(ssl_conn);
++    if (sess != NULL) {
++      *name = (char *) SSL_SESSION_get0_hostname(sess);
++      if (*name) {
++          *namelen = ngx_strlen(*name);
++          return NGX_OK;
++      }
++    }
++
++#endif
++
++    *name = "";
++    *namelen = 0;
++    return NGX_OK;
++}
++
++
+ int
+ ngx_stream_lua_ffi_ssl_server_port(ngx_stream_lua_request_t *r,
+     unsigned short *server_port, char **err)