search

netsec-ethz / scion-apps

Public repository for SCION applications
Apache License 2.0
20 stars 43 forks source link

pan: SNI apparently currently broken, breaks TLS for web-gateway #248

Closed benthor closed 5 months ago

benthor commented 5 months ago

The web-gateway is currently broken for TLS, because Server Name Identification (SNI) appears to have been inadvertently dropped from pan. The host argument to DialQUIC is no longer being processed.

https://github.com/netsec-ethz/scion-apps/blob/3afc9a9118080aa78e6a6435c06549a8a6c0bd23/pkg/pan/quic_dial.go#L53

benthor commented 5 months ago

This is the breaking change