From 77b10b01c058ff673fef9d40abf4e414bda6cc44 Mon Sep 17 00:00:00 2001 From: Simon Zolin <s.zolin@adguard.com> Date: Thu, 23 Jan 2020 18:27:20 +0300 Subject: [PATCH] + config: strict_sni_check --- Configuration.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Configuration.md b/Configuration.md index 28253df..d104e9f 100644 --- a/Configuration.md +++ b/Configuration.md @@ -175,6 +175,7 @@ Settings are stored in [YAML format](https://en.wikipedia.org/wiki/YAML), possib * `port_https` - HTTPS port. If 0, HTTPS will be disabled. * `port_dns_over_tls` - DNS-over-TLS port. If 0, DOT will be disabled. * `certificate_chain` - PEM-encoded certificates chain. + * `strict_sni_check` - Reject connection if the client uses server name (in SNI) that doesn't match the certificate * `private_key` - PEM-encoded private key. * `icmp_timeout_msec` - time (ms) to wait for ICMP reply to detect an IP conflict. If 0, the feature is disabled. * `user_rules` — User-specified filtering rules.