ginuerzh dd19e4387a feat(tls): add rejectUnknownSNI support for TLS listeners ...

Adds RejectUnknownSNI and ServerNames fields to TLSConfig. When enabled,
TLS handshakes with missing or non-allowlisted SNI are rejected at the
handshake level via GetConfigForClient before any certificate is sent.

Works across all TLS-based listener types (tls, mtls, ws, mws, http2,
grpc, http3) since they share the same *tls.Config from LoadServerConfig.

2026-05-31 22:11:29 +08:00

..

listener.go

add context for conn

2025-08-04 19:29:38 +08:00

tls_test.go

feat(tls): add rejectUnknownSNI support for TLS listeners

2026-05-31 22:11:29 +08:00

tls.go

feat(tls): add rejectUnknownSNI support for TLS listeners

2026-05-31 22:11:29 +08:00