29 Aug
2014
29 Aug
'14
6:25 p.m.
Hi,
Back in Kamailio 1.5, the release notes state:
"support for TLS server_name extension (aka SNI=server name indication)"
However, I cannot find any indication of this in the current TLS docs, and
trying to set tls_server_name or server_name in tls.cfg fails with
"unsupported option".
Is this actually supported?
Thanks.
-Barry Flanagan
29 Aug
29 Aug
7:11 p.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
Hello,
starting with 3.0 we got the implementation from SER at that time (being
more flexible with config and later getting asynchronous support).
A quick grep in the sources shows things related to server_name, but
apparently is just for accessing them via cfg selects.
I cc-ed Jan who is author of some commits related to server name and
Klaus who did the patch for old kamailio -- maybe they remember how far
it got with server name implementation and if it got at least the parts
from old kamailio to 3.0.
Cheers,
Daniel
On 29/08/14 15:25, Barry Flanagan wrote:
Hi,
Back in Kamailio 1.5, the release notes state:
"support for TLS server_name extension (aka SNI=server name indication)"
However, I cannot find any indication of this in the current TLS docs,
and trying to set tls_server_name or server_name in tls.cfg fails with
"unsupported option".
Is this actually supported?
Thanks.
-Barry Flanagan
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
Sep 22-25, Berlin, Germany ::: Oct 15-17, San Francisco, USA
2 Sep
2 Sep
6:57 p.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
Indeed, currently Kamailio does not support SNI (was dropped with ser merge)
Klaus
On 29.08.2014 16:11, Daniel-Constantin Mierla wrote:
Hello,
starting with 3.0 we got the implementation from SER at that time (being
more flexible with config and later getting asynchronous support).
A quick grep in the sources shows things related to server_name, but
apparently is just for accessing them via cfg selects.
I cc-ed Jan who is author of some commits related to server name and
Klaus who did the patch for old kamailio -- maybe they remember how far
it got with server name implementation and if it got at least the parts
from old kamailio to 3.0.
Cheers,
Daniel
On 29/08/14 15:25, Barry Flanagan wrote:
Hi,
Back in Kamailio 1.5, the release notes state:
"support for TLS server_name extension (aka SNI=server name indication)"
However, I cannot find any indication of this in the current TLS docs,
and trying to set tls_server_name or server_name in tls.cfg fails with
"unsupported option".
Is this actually supported?
Thanks.
-Barry Flanagan
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
Sep 22-25, Berlin, Germany ::: Oct 15-17, San Francisco, USA
7:49 p.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
Hi Klaus,
thanks for updating on the status.
Do you remember what implied to add support for SNI?
It should be brought back if we lost it. Maybe you can adapt the old
patch if it not something that complex and you have time to look at it.
Otherwise, any further details about what you had to do in the past
would help to add support for it again.
Daniel
On 02/09/14 15:57, Klaus Darilion wrote:
Indeed, currently Kamailio does not support SNI (was
dropped with ser merge)
Klaus
On 29.08.2014 16:11, Daniel-Constantin Mierla wrote:
> Hello,
>
> starting with 3.0 we got the implementation from SER at that time (being
> more flexible with config and later getting asynchronous support).
>
> A quick grep in the sources shows things related to server_name, but
> apparently is just for accessing them via cfg selects.
>
> I cc-ed Jan who is author of some commits related to server name and
> Klaus who did the patch for old kamailio -- maybe they remember how far
> it got with server name implementation and if it got at least the parts
> from old kamailio to 3.0.
>
> Cheers,
> Daniel
>
> On 29/08/14 15:25, Barry Flanagan wrote:
>> Hi,
>>
>> Back in Kamailio 1.5, the release notes state:
>>
>> "support for TLS server_name extension (aka SNI=server name
indication)"
>>
>> However, I cannot find any indication of this in the current TLS docs,
>> and trying to set tls_server_name or server_name in tls.cfg fails with
>> "unsupported option".
>>
>> Is this actually supported?
>>
>> Thanks.
>>
>> -Barry Flanagan
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> sr-users(a)lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> --
> Daniel-Constantin Mierla
> http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
> Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
> Sep 22-25, Berlin, Germany ::: Oct 15-17, San Francisco, USA
>
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
Sep 22-25, Berlin, Germany ::: Oct 15-17, San Francisco, USA
8:01 p.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
Adding SNI was rather easy. I used the original SNI patch for Apache and
copy-pasted this patch into Kamailio. We could do this again, but this
patch does not have any license details, thus I would recommend to not
do it. Unfortunately I haven't found proper SNI API desription of
libssl. Maybe we can find some software with SNI support and BSD license
and then copy/paste the code.
regards
Klaus
On 02.09.2014 16:49, Daniel-Constantin Mierla wrote:
Hi Klaus,
thanks for updating on the status.
Do you remember what implied to add support for SNI?
It should be brought back if we lost it. Maybe you can adapt the old
patch if it not something that complex and you have time to look at it.
Otherwise, any further details about what you had to do in the past
would help to add support for it again.
Daniel
On 02/09/14 15:57, Klaus Darilion wrote:
Indeed, currently Kamailio does not support SNI
(was dropped with ser
merge)
Klaus
On 29.08.2014 16:11, Daniel-Constantin Mierla wrote:
> Hello,
>
> starting with 3.0 we got the implementation from SER at that time (being
> more flexible with config and later getting asynchronous support).
>
> A quick grep in the sources shows things related to server_name, but
> apparently is just for accessing them via cfg selects.
>
> I cc-ed Jan who is author of some commits related to server name and
> Klaus who did the patch for old kamailio -- maybe they remember how far
> it got with server name implementation and if it got at least the parts
> from old kamailio to 3.0.
>
> Cheers,
> Daniel
>
> On 29/08/14 15:25, Barry Flanagan wrote:
>> Hi,
>>
>> Back in Kamailio 1.5, the release notes state:
>>
>> "support for TLS server_name extension (aka SNI=server name
>> indication)"
>>
>> However, I cannot find any indication of this in the current TLS docs,
>> and trying to set tls_server_name or server_name in tls.cfg fails with
>> "unsupported option".
>>
>> Is this actually supported?
>>
>> Thanks.
>>
>> -Barry Flanagan
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> sr-users(a)lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> --
> Daniel-Constantin Mierla
> http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
> Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
> Sep 22-25, Berlin, Germany ::: Oct 15-17, San Francisco, USA
>
3 Sep
3 Sep
5:28 a.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
>>>> "KD" == Klaus Darilion
<klaus.mailinglists(a)pernau.at> writes:
KD> Maybe we can find some software with SNI support and BSD license
KD> and then copy/paste the code.
nginx is a possibility.
-JimC
--
James Cloos <cloos(a)jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6
4 Sep
4 Sep
12:19 p.m.
New subject: Support for TLS server_name extension (aka SNI=server name indication)
On 03/09/14 02:28, James Cloos wrote:
Thanks for the hint. I will have it in my mind if Klaus or
some other
developer has no time for it.
Cheers,
Daniel
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Next Kamailio Advanced Trainings 2014 - http://www.asipto.com
Sep 22-25, Berlin, Germany
>>>> "KD" == Klaus Darilion <klaus.mailinglists(a)pernau.at>
writes:
KD> Maybe we can find some software with SNI support and BSD license
KD> and then copy/paste the code.
nginx is a possibility.
3532
days inactive
3538
days old
6 comments
4 participants
participants (4)
-
Barry Flanagan -
Daniel-Constantin Mierla -
James Cloos -
Klaus Darilion