dot upstreams: per-upstream tls_name for sni and cert verification by dns name

2026-08-01 14:38:45 +02:00
parent 70bff22d75
commit 3baf5d6581
13 changed files with 405 additions and 17 deletions
@@ -647,7 +647,7 @@ fn probeUpstreams(r: Runner, cfg: model.Config) !usize {
                break :doh doh.client();
            },
            .dot => dot: {
-                dot = dot_client.DotClient.init(endpoint, r.gpa, &bundle, &bundle_lock, .{
+                dot = dot_client.DotClient.init(endpoint, server.tls_name, r.gpa, &bundle, &bundle_lock, .{
                    .tls_read = tls_buffers[0..chunk],
                    .tls_write = tls_buffers[chunk .. 2 * chunk],
                    .stream_read = tls_buffers[2 * chunk .. 3 * chunk],