cURL Mailing List Monthly Index Single Mail
curl-library Mailing List Archives
Re: [PATCH] support for server name indication (RFC 4366)
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 12 Feb 2008 12:52:30 +0100 (CET)
On Tue, 12 Feb 2008, Guenter Knauf wrote:
> Meanwhile all modern browsers support SNI, and since OpenSSL 0.9.8f is out
> Therefore we thought that cURL should also support SNI
Sounds Neat Indeed! ;-P
> and Kaspar created a patch:
It is surprisingly small I must say.
> In order to identify a cURL build which supports the SNI extension I did add
This check only works for OpenSSL, right? It would need to check for the
> when you have compiled OpenSSL 0.9.8f or later with 'enable-tlsext' and
Out of curiousity, do you happen to know why this isn't enabled by default in
> as you can see I have tested from Win32 platform with OpenSSL which works so
I can do some testing with GnuTLS at least.
> The patch is a proposal for further discussion - there are a couple of
I agree, but that's also why I asked about openssl. Why do they have it
> - should SNI feature be switchable at runtime (my 2ct: yes)
I think it should, just most features are with libcurl as I have no doubts
> - should it be enabled or disabled by default (my 2ct: enabled)
I vote enabled too.
> - if we disable SNI at runtime, should it be sparate for SNI only, or just
I think we should disable SNI only, and once we support other extensions we
> and finally another question which unfortunately Patrick was not able to
Well, we should of course still work fine even if it doesn't. It certainly
-- Commercial curl and libcurl Technical Support: http://haxx.se/curl.htmlReceived on 2008-02-12
These mail archives are generated by hypermail.
Page updated November 12, 2010.
web site info