On Wed, Sep 23, 2009 at 11:03:55AM +1000, Daniel Black wrote:

> 
> Should SSL_set_tlsext_host_name convert the domain name to ACE as per 
> RFC4366 3.1 where it talks about IDNA (RFC 3490)?

On the wire, domain names are always of the ASCII xn--mumble variety. The
corresponding Unicode is a matter of user display. Thus, to the extent
that hostnames are exchanged in SNI, they are ASCII host names. The RFC
is clear as mud of course. :-(

So SSL_set_tlsext_host_name() is a valid ASCII domain name, that may
encode a Unicode name, but is not directly unicode.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to