Feature Request: TLS server name indication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi!

Openssl 0.9.8g support the TLS extension "server name" (or also often 
called SNI for server name indication). (when configured with 
"enable-tlsext")[1][2]

If the TLS clients uses the server name extension in the ClientHello, 
the server can host multiple TLS domains on the same socket (because the 
  server nows which certificate to present to the client).

I think it would be rather easy for pjsip to add this feature - at least 
for outgoing TLS connection (pjsip = TLS client).

Actually there is no SIP proxy yet which supports it, but I have it on 
my Todo list for openser, but found out that I do not have a client for 
testing :-)

regards
klaus

[1] 
http://howtoforge.com/enable-multiple-https-sites-on-one-ip-using-tls-extensions-on-debian-etch
[2] https://sni.velox.ch/



[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux