Re: Specializing TLS protocols on per SNI basis

2019-01-17 Thread Alan Carroll
You should be able to use TSVConnArgs at this point to pass data up to transactions. Zeyuan (dyrock) has been working on that and AFAIK it's in master. On Thu, Jan 17, 2019 at 1:53 PM Susan Hinrichs wrote: > Yes, we need to map out hook points for the client hello. > > What do you mean by "will

Re: Specializing TLS protocols on per SNI basis

2019-01-17 Thread Susan Hinrichs
Yes, we need to map out hook points for the client hello. What do you mean by "will a hook play nice with the defined actions" ? The vconn_start and vconn_close hooks have landed. We've back ported them to our branch and are using vconn_close in one of our plugins (which is in a PR back to open

Re: Specializing TLS protocols on per SNI basis

2019-01-17 Thread Kees Spoelstra
Great... This is exactly the location to do all the nasty stuff, this callback happens before all the other callbacks and you should be able to setup some stuff for the following callbacks. @Susan : are there plans to make the client hello callback an async hook for plugins? We were planning to d

Re: Specializing TLS protocols on per SNI basis

2019-01-17 Thread Susan Hinrichs
Possibly. I would need to look at when the ALPN negotiation happens. However, the protocol options on the SSL object seems to get sticky really fast, so I wouldn't hold my breath. On Wed, Jan 16, 2019 at 7:56 PM Leif Hedstrom wrote: > > > > On Jan 16, 2019, at 4:33 PM, Susan Hinrichs wrote: >