TLS: Whine to log on client config of SNI under too-old OpenSSL version

diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c
index f45daa767386b1eb768d0b136150b835ed527dcb..98762fd624999ab482a72eb8592aa8ed320589e8 100644 (file)
--- a/src/src/tls-openssl.c
+++ b/src/src/tls-openssl.c
@@ -2079,8 +2079,7 @@ if (ob->tls_sni)
     DEBUG(D_tls) debug_printf("Setting TLS SNI \"%s\"\n", tls_out.sni);
     SSL_set_tlsext_host_name(client_ssl, tls_out.sni);
 #else
     DEBUG(D_tls) debug_printf("Setting TLS SNI \"%s\"\n", tls_out.sni);
     SSL_set_tlsext_host_name(client_ssl, tls_out.sni);
 #else

-    DEBUG(D_tls)
-      debug_printf("OpenSSL at build-time lacked SNI support, ignoring \"%s\"\n",
+    log_write(0, LOG_MAIN, "SNI unusable with this OpenSSL library version; ignoring \"%s\"\n",

           tls_out.sni);
 #endif
     }
           tls_out.sni);
 #endif
     }

diff --git a/test/scripts/2100-OpenSSL/2130 b/test/scripts/2100-OpenSSL/2130
index 1de3e4f40af59dc5e285352193bd5207f5aa6bd4..afaa949e060ebe4d472b1ab66fba21c39f565f83 100644 (file)
--- a/test/scripts/2100-OpenSSL/2130
+++ b/test/scripts/2100-OpenSSL/2130
@@ -1,4 +1,4 @@
-# TLS: SNI
+# TLS: client SNI

 #
 exim -DSERVER=server -bd -oX PORT_D
 ****
 #
 exim -DSERVER=server -bd -oX PORT_D
 ****