From 997e1bb42804daf4849cd5396703bf05dc52e223 Mon Sep 17 00:00:00 2001
From: Hakase <hakase@hakase.app>
Date: Thu, 4 Oct 2018 23:42:07 +0900
Subject: [PATCH] Update nginx strict sni patch.

Issue: https://github.com/hakasenyang/openssl-patch/issues/1#issuecomment-427040319
---
 src/event/ngx_event_openssl.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
index 3deff20..e731065 100644
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -1460,6 +1460,14 @@ ngx_ssl_handshake(ngx_connection_t *c)
 
     c->read->error = 1;
 
+    // nginx strict sni patch.
+    // https://github.com/hakasenyang/openssl-patch/issues/1#issuecomment-427040319
+    if (sslerr == SSL_ERROR_SSL) {
+        ERR_peek_error();
+        ERR_clear_error();
+        return NGX_ERROR;
+    }
+
     ngx_ssl_connection_error(c, sslerr, err, "SSL_do_handshake() failed");
 
     return NGX_ERROR;