Implement SNI when using DNS-over-TLS

System Internals / systemd - Guilhem Lettron [barpilot.io] - 4 December 2019 14:24 UTC

Some DNS providers need SNI to identify client.

This can be used by adding #name to a DNS. Example: [Resolve] DNS=192.168.1.1#example.com

2e22a54f4e Implement SNI when using DNS-over-TLS
man/resolved.conf.xml | 3 +++
src/resolve/meson.build | 8 ++++++++
src/resolve/resolved-conf.c | 6 ++++--
src/resolve/resolved-dns-server.c | 12 +++++++++++-
src/resolve/resolved-dns-server.h | 5 ++++-
src/resolve/resolved-dnstls-gnutls.c | 6 ++++++
src/resolve/resolved-dnstls-openssl.c | 11 +++++++++++
src/resolve/resolved-link-bus.c | 2 +-
src/resolve/resolved-link.c | 2 +-
src/resolve/resolved-util.c | 36 +++++++++++++++++++++++++++++++++++
src/resolve/resolved-util.h | 6 ++++++
src/resolve/test-resolved-util.c | 32 +++++++++++++++++++++++++++++++
12 files changed, 123 insertions(+), 6 deletions(-)

Upstream: github.com


  • Share