- use mbedtls_ssl_set_hostname to disable mandatory hostname checks in newer versions of mbedtls

3 months ago · e08775bfd2
parent 0cb094b056
commit e08775bfd2
2 changed files with 6 additions and 2 deletions
--- a/hal/tls/mbedtls/tls_mbedtls.c
+++ b/hal/tls/mbedtls/tls_mbedtls.c
@ -3,7 +3,7 @@
 *
 * TLS API for TCP/IP protocol stacks
 *
- * Copyright 2017-2024 Michael Zillgith
+ * Copyright 2017-2025 Michael Zillgith
 *
 * Implementation of the TLS abstraction layer for mbedtls
 *
@ -943,6 +943,8 @@ TLSSocket_create(Socket socket, TLSConfiguration configuration, bool storeClient
            }
        }

+        mbedtls_ssl_set_hostname(&(self->ssl), NULL);
+
        while( (ret = mbedtls_ssl_handshake(&(self->ssl)) ) != 0 )
        {
            if( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE )
--- a/hal/tls/mbedtls3/tls_mbedtls.c
+++ b/hal/tls/mbedtls3/tls_mbedtls.c
@ -3,7 +3,7 @@
 *
 * TLS API for TCP/IP protocol stacks
 *
- * Copyright 2017-2024 Michael Zillgith
+ * Copyright 2017-2025 Michael Zillgith
 *
 * Implementation of the TLS abstraction layer for mbedtls
 *
@ -1036,6 +1036,8 @@ TLSSocket_create(Socket socket, TLSConfiguration configuration, bool storeClient
            }
        }

+        mbedtls_ssl_set_hostname(&(self->ssl), NULL);
+
        while ((ret = mbedtls_ssl_handshake(&(self->ssl))) != 0)
        {
            if (ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE)