Re: Parsing an SSL hello packet

2014-10-28 Thread Florian Weimer
* Graham Leggett: > Is there a way to know whether the initial handshake has arrived fully? I think you can abort the handshake from within the server name callback with a suitable return value, so this does not really matter. You just have to make sure the alert is never sent to the client, and

Re: Parsing an SSL hello packet

2014-10-28 Thread Graham Leggett
On 28 Oct 2014, at 1:30 PM, Florian Weimer wrote: > * Graham Leggett: > >> I have a need to parse the first incoming hello packet on an >> incoming TLS connection and based on the presence (or absence) of >> the SNI header, choose to pass the connection through to another >> server. > > I think

Re: Parsing an SSL hello packet

2014-10-28 Thread Florian Weimer
* Graham Leggett: > I have a need to parse the first incoming hello packet on an > incoming TLS connection and based on the presence (or absence) of > the SNI header, choose to pass the connection through to another > server. I think you'll need to work with BIOs to make a copy of the initial han