On Wed, Sep 23, 2009 at 11:03:55AM +1000, Daniel Black wrote: > > Should SSL_set_tlsext_host_name convert the domain name to ACE as per > RFC4366 3.1 where it talks about IDNA (RFC 3490)?
On the wire, domain names are always of the ASCII xn--mumble variety. The corresponding Unicode is a matter of user display. Thus, to the extent that hostnames are exchanged in SNI, they are ASCII host names. The RFC is clear as mud of course. :-( So SSL_set_tlsext_host_name() is a valid ASCII domain name, that may encode a Unicode name, but is not directly unicode. -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org