From 77b10b01c058ff673fef9d40abf4e414bda6cc44 Mon Sep 17 00:00:00 2001
From: Simon Zolin <s.zolin@adguard.com>
Date: Thu, 23 Jan 2020 18:27:20 +0300
Subject: [PATCH] + config: strict_sni_check

---
 Configuration.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Configuration.md b/Configuration.md
index 28253df..d104e9f 100644
--- a/Configuration.md
+++ b/Configuration.md
@@ -175,6 +175,7 @@ Settings are stored in [YAML format](https://en.wikipedia.org/wiki/YAML), possib
    * `port_https` - HTTPS port. If 0, HTTPS will be disabled.
    * `port_dns_over_tls` - DNS-over-TLS port. If 0, DOT will be disabled.
    * `certificate_chain` - PEM-encoded certificates chain.
+   * `strict_sni_check` - Reject connection if the client uses server name (in SNI) that doesn't match the certificate
    * `private_key` - PEM-encoded private key.
    * `icmp_timeout_msec` - time (ms) to wait for ICMP reply to detect an IP conflict. If 0, the feature is disabled.
  * `user_rules` — User-specified filtering rules.