From 72e2b4f6e9ae2760a4e16bb010a573cdbf00df56 Mon Sep 17 00:00:00 2001
From: Julien Vehent <julien@linuxwall.info>
Date: Fri, 18 Sep 2015 13:14:11 -0400
Subject: [PATCH] Enable Server Name Indication by default

---
 cipherscan | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/cipherscan b/cipherscan
index 0f680eb..1cb26d1 100755
--- a/cipherscan
+++ b/cipherscan
@@ -204,6 +204,7 @@ SAVECRT=""
 TEST_CURVES="True"
 has_curves="False"
 TEST_TOLERANCE="True"
+SNI="True"
 # openssl formated list of curves that will cause server to select ECC suite
 ecc_ciphers=""
 unset known_certs
@@ -248,6 +249,7 @@ Use one of the options below:
 --savecrt           path where to save untrusted and leaf certificates
 --[no-]curves       test ECC curves supported by server (req. OpenSSL 1.0.2)
 --[no-]tolerance    test TLS tolerance
+--no-sni            don't use Server Name Indication
 --no-colors         don't use terminal colors
 -v | --verbose      Increase verbosity.
 
@@ -1426,6 +1428,10 @@ do
             USECOLORS="False"
             shift 1
             ;;
+        --no-sni)
+            SNI="False"
+            shift 1
+            ;;
         --) # End of all options
             shift
             break
@@ -1470,7 +1476,13 @@ if [[ -z $TARGET || $TARGET =~ ^[-:] || $TARGET =~ :.*[^0-9] ]]; then
     exit 1
 fi
 if ! [[ $TARGET =~ : ]]; then
+    sni_target=$TARGET
     TARGET="${TARGET}:443"
+else
+    # strip the port for the sni_target
+    if [[ "$TARGET" =~ (.*):([0-9]{1,5}) ]]; then
+        sni_target="${BASH_REMATCH[1]}"
+    fi
 fi
 
 debug "target: $TARGET"
@@ -1519,6 +1531,9 @@ if [[ $VERBOSE != 0 ]] ; then
 fi
 
 SCLIENTARGS="${PARAMS[*]}"
+if [[ $SNI == "True" ]]; then
+    SCLIENTARGS="$SCLIENTARGS -servername $sni_target"
+fi
 debug "sclientargs: $SCLIENTARGS"