From e75d06de207e9afe4259d5e731cb77ae25faf003 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Thu, 28 Jan 2021 14:31:38 +0000 Subject: Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNI --- doc/s6-tlsd-io.html | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) (limited to 'doc/s6-tlsd-io.html') diff --git a/doc/s6-tlsd-io.html b/doc/s6-tlsd-io.html index 53b1282..7e38885 100644 --- a/doc/s6-tlsd-io.html +++ b/doc/s6-tlsd-io.html @@ -200,11 +200,9 @@ TLS handshake has completed, some data (terminated by two null characters) will be sent to file descriptor notif. The data contains information about the TLS parameters of the connection; its exact contents are left unspecified, but there's at least -a SSL_PROTOCOL=protocol string, -a SSL_CIPHER=cipher string, -and a SSL_TLS_SNI_SERVERNAME=servername string - all null-terminated. (servername is the empty string if -no SNI has been required.) +a SSL_PROTOCOL=protocol string and +a SSL_CIPHER=cipher string, both +null-terminated. Sending this data serves a dual purpose: telling the notif reader that the handshake has completed, and providing it with some basic information about the connection. If this option is not given, -- cgit v1.2.3