fix(tls/sni): Improve logging for TLS session resumption by extracting and logging SNI values from ClientHello messages.

This commit is contained in:
2025-03-12 10:01:54 +00:00
parent 156abbf5b4
commit ab1ec84832
4 changed files with 52 additions and 5 deletions

View File

@ -1,5 +1,11 @@
# Changelog
## 2025-03-12 - 3.41.4 - fix(tls/sni)
Improve logging for TLS session resumption by extracting and logging SNI values from ClientHello messages.
- Added logging to output the extracted SNI value during renegotiation, initial ClientHello and in the SNI handler.
- Enhanced error handling during SNI extraction to aid troubleshooting of TLS session resumption issues.
## 2025-03-12 - 3.41.3 - fix(TLS/SNI)
Improve TLS session resumption handling and logging. Now, session resumption attempts are always logged with details, and connections without a proper SNI are rejected when allowSessionTicket is disabled. In addition, empty SNI extensions are explicitly treated as missing, ensuring stricter and more consistent TLS handshake validation.