On Thu, Aug 20, 2020 at 11:59:01AM +0300, Dmitry Belyavsky wrote: > OpenSSL uses gethostbyname/gethostbyaddr Also getaddrinfo(3), I hope in preference to the obsolete interfaces. There is no explicit use of DNS in OpenSSL, and many OpenSSL applications open their own TCP connections, and then ask OpenSSL to perform a handshake over an already connected socket, in which case OpenSSL does no name lookups at all. -- Viktor.