wolfjsse: auto-enable SNI for HttpsURLConnection
Enable SNI automatically when detecting HttpsURLConnection's unique initialization pattern, fixing ImpactOnSNI test while preserving default SNI behavior for SSL sockets.pull/253/head
parent
1e530a911e
commit
d075893cbc
|
@ -892,6 +892,22 @@ public class WolfSSLEngineHelper {
|
||||||
boolean autoSNI = "true".equalsIgnoreCase(
|
boolean autoSNI = "true".equalsIgnoreCase(
|
||||||
Security.getProperty("wolfjsse.autoSNI"));
|
Security.getProperty("wolfjsse.autoSNI"));
|
||||||
|
|
||||||
|
/* Detect HttpsURLConnection usage by checking:
|
||||||
|
* - Client mode is set (client-side connection)
|
||||||
|
* - Has hostname from URL
|
||||||
|
* - Has peer address from socket
|
||||||
|
* - No explicit SNI configuration
|
||||||
|
* This pattern is unique to HttpsURLConnection initialization
|
||||||
|
*/
|
||||||
|
boolean isHttpsConnection = this.clientMode &&
|
||||||
|
this.hostname != null &&
|
||||||
|
this.peerAddr != null &&
|
||||||
|
this.params.getServerNames() == null;
|
||||||
|
|
||||||
|
/* Enable SNI if explicitly requested via property or if
|
||||||
|
* HttpsURLConnection is detected */
|
||||||
|
autoSNI = autoSNI || isHttpsConnection;
|
||||||
|
|
||||||
if (!enableSNI) {
|
if (!enableSNI) {
|
||||||
WolfSSLDebug.log(getClass(), WolfSSLDebug.INFO,
|
WolfSSLDebug.log(getClass(), WolfSSLDebug.INFO,
|
||||||
"jsse.enableSNIExtension property set to false, " +
|
"jsse.enableSNIExtension property set to false, " +
|
||||||
|
|
Loading…
Reference in New Issue