Re: Server name indication

2010-04-09 Thread Sad Clouds
On Fri, 09 Apr 2010 16:50:48 +0200 Peter Sylvester wrote: > Sad Clouds wrote: > > Hi, is there any sort of documentation on how to use SNI with > > OpenSSL? > As far as I know, only the source in s_client and s_server.c OK thanks. I'll have a look at the source code of those and see if I can fi

Re: Server name indication

2010-04-09 Thread Peter Sylvester
connssl->handle, conn->host.name)) infof(data, "WARNING: failed to configure server name indication (SNI) " "TLS extension\n"); #endif For example, what functions to use and what steps to take. ___

Server name indication

2010-04-09 Thread Sad Clouds
Hi, is there any sort of documentation on how to use SNI with OpenSSL? For example, what functions to use and what steps to take. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Server Name Indication interface

2008-11-24 Thread Victor Duchovni
On Mon, Nov 24, 2008 at 10:25:24AM -0500, Patrick Patterson wrote: > > There will be no support for separately tunable SSL options per target > > hostname, the only variables from name to name are the contents of > > the PKCS#12 containers associated with each name. > > Can you also make it so tha

Re: Server Name Indication interface

2008-11-24 Thread Patrick Patterson
Hi Victor: On November 21, 2008 04:06:44 pm Victor Duchovni wrote: > The server-side SNI support in OpenSSL seems to be targeted at HTTPS > virtual host configurations, in which each Virtual host is associated > with its own SSL_CTX object, initialized not only with a separate > key+cert+trust cha

Server Name Indication interface

2008-11-21 Thread Victor Duchovni
The server-side SNI support in OpenSSL seems to be targeted at HTTPS virtual host configurations, in which each Virtual host is associated with its own SSL_CTX object, initialized not only with a separate key+cert+trust chain, but also with a separate cipherlist, list of trusted CAs (really X509_S

Server Name Indication usage in OpenSSL 0.9.8g

2008-06-17 Thread geragray
much appreciated. Thanks in advance. -- Sergey Gerasimenko -- View this message in context: http://www.nabble.com/Server-Name-Indication-usage-in-OpenSSL-0.9.8g-tp17896727p17896727.html Sent from the OpenSSL - User mailing list archive at Nabbl

Re: TLS Extension support - Server Name Indication

2005-10-13 Thread Peter Sylvester
Dear OpenSSL developpers, I have put a version of openssl that supports the TLS servername extension into our web server. It is based on a openssl development snapshot of last week. We have split of and simplified the code that was done together with SRP last year, an,d corrected known bugs. S

TLS Extension support - Server Name Indication

2005-10-12 Thread Cesc
Hi,   While discussing the proper implementation for TLS support for (open)ser SIP proxy (currently using OpenSSL), we came up with somehow a showstopper: when the server serves multiple domains, we'd like to present a different certificate depending on which domain the incoming message is directed