fix(tls/sni): Improve logging for TLS session resumption by extracting and logging SNI values from ClientHello messages.
This commit is contained in:
@ -413,7 +413,36 @@ export class SniHandler {
|
||||
// Check that the SNI extension actually has content
|
||||
if (extensionLength > 0) {
|
||||
hasSNI = true;
|
||||
log('Found SNI extension with length: ' + extensionLength);
|
||||
|
||||
// Try to extract the actual SNI value for logging
|
||||
try {
|
||||
// Skip to server_name_list_length (2 bytes)
|
||||
const tempPos = pos;
|
||||
if (tempPos + 2 <= extensionsEnd) {
|
||||
const nameListLength = (buffer[tempPos] << 8) + buffer[tempPos + 1];
|
||||
|
||||
// Skip server_name_list_length (2 bytes)
|
||||
if (tempPos + 2 + 1 <= extensionsEnd) {
|
||||
// Check name_type (should be 0 for hostname)
|
||||
if (buffer[tempPos + 2] === 0) {
|
||||
// Skip name_type (1 byte)
|
||||
if (tempPos + 3 + 2 <= extensionsEnd) {
|
||||
// Get name_length (2 bytes)
|
||||
const nameLength = (buffer[tempPos + 3] << 8) + buffer[tempPos + 4];
|
||||
|
||||
// Extract the hostname
|
||||
if (tempPos + 5 + nameLength <= extensionsEnd) {
|
||||
const hostname = buffer.slice(tempPos + 5, tempPos + 5 + nameLength).toString('utf8');
|
||||
log(`Found SNI extension with server_name: ${hostname}`);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
} catch (e) {
|
||||
log(`Error extracting SNI value: ${e}`);
|
||||
log('Found SNI extension with length: ' + extensionLength);
|
||||
}
|
||||
} else {
|
||||
log('Found empty SNI extension, treating as no SNI');
|
||||
}
|
||||
|
Reference in New Issue
Block a user