From c7425f42db5f2bf300afc01d29e5a6fb2b2dfb2b Mon Sep 17 00:00:00 2001
From: Maximilian Hils <git@maximilianhils.com>
Date: Fri, 18 Jul 2014 23:04:24 +0200
Subject: if no_upstream_cert is set, include SNI value als SubjectAltName, fix
 #291

---
 libmproxy/proxy/server.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'libmproxy/proxy')

diff --git a/libmproxy/proxy/server.py b/libmproxy/proxy/server.py
index 741e5f93..72228f16 100644
--- a/libmproxy/proxy/server.py
+++ b/libmproxy/proxy/server.py
@@ -237,6 +237,8 @@ class ConnectionHandler:
                 if upstream_cert.cn:
                     host = upstream_cert.cn.decode("utf8").encode("idna")
                 sans = upstream_cert.altnames
+            elif self.config.no_upstream_cert and self.sni:
+                sans = [self.sni]
 
             ret = self.config.certstore.get_cert(host, sans)
             if not ret:
-- 
cgit v1.2.3