From a592b83f05fd27d19f37e625eb7ef20f7c40f287 Mon Sep 17 00:00:00 2001
From: Hakase <hakase@hakase.app>
Date: Wed, 3 Apr 2019 20:46:05 +0900
Subject: [PATCH] Patch Strict-SNI

---
 src/http/ngx_http_request.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/http/ngx_http_request.c b/src/http/ngx_http_request.c
index eb68bfe..a307d2a 100644
--- a/src/http/ngx_http_request.c
+++ b/src/http/ngx_http_request.c
@@ -912,6 +912,10 @@ ngx_http_ssl_servername(ngx_ssl_conn_t *ssl_conn, int *ad, void *arg)
     }
 
     if (rc == NGX_DECLINED) {
+        // If SNI is not needed (1 server, etc.), do not apply.
+        if (hc->addr_conf->virtual_names == NULL) {
+            return SSL_TLSEXT_ERR_OK;
+        }
         return (clcf->strict_sni) ? SSL_TLSEXT_ERR_ALERT_FATAL : SSL_TLSEXT_ERR_OK;
     }