Skip to content

Conversation

@ctz
Copy link
Member

@ctz ctz commented Feb 28, 2025

Due to CVE-2025-23419 fedora's nginx now calls SSL_SESSION_get0_hostname to learn the session's original SNI value. Stub it out.

Should fix https://github.com/rustls/rustls-openssl-compat/actions/runs/13544303491

ctz added 2 commits February 28, 2025 18:09
Due to CVE-2025-23419 fedora's nginx now calls this to
learn the session's original SNI value.  For more faithful
keeping with the OpenSSL API, we could also store this for TLS1.2
and return it here, but we don't do that currently so pretend there
is no SNI for TLS1.2 sessions.
@ctz ctz merged commit f6e33fd into main Feb 28, 2025
32 checks passed
@ctz ctz deleted the jbp-fix-fedora-ci branch February 28, 2025 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants