Nigel Sollars wrote:
>> I use SNI with VHosts myself on a shared server. But support on the
>> client side is still limited -- most importantly IE on Windows XP does
> Not even 8?
According to the net no (did not try it myself).
It seems to depends on the TLS library in WinXP, not the IE version.
> the wiki says 0.9.8f supports SNI but it is not compiled in by default,
> since I am using what came with FedoraCore 10 ( 0.9.8g ) is there a way
> to see if I am good there?, checked online ( openssl docs ) but again
> came up empty.
I guess you could check if your library files contain the new function
symbols, e.g. 'ssl_check_serverhello_tlsext'.
Output of nm on my machine; th first path is to OpenSSL 0.9.8e, the
second path is to OpenSSL 0.9.8k:
[mschu...@dagny] ~> nm /usr/lib/libssl.a | grep serverhello_tlsext
[mschu...@dagny] ~> nm /usr/local/lib/libssl.a | grep serverhello_tlsext
U ssl_add_serverhello_tlsext
U ssl_check_serverhello_tlsext
U ssl_parse_serverhello_tlsext
00000030 T ssl_add_serverhello_tlsext
000005c0 T ssl_check_serverhello_tlsext
000008e0 T ssl_parse_serverhello_tlsext
[mschu...@dagny] ~>
--
Martin
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
