[sr-dev] tls related compiler warnings

Jan Janak jan at iptel.org
Fri May 29 12:28:33 CEST 2009


On 28-05 22:26, Juha Heinanen wrote:
> Andrei Pelinescu-Onciul writes:
> 
>  > It depends, if you want to use TLS extensions (for now this means
>  > getting the TLS server name extension from the script via the
>  > @tls.serverName select or the &tls_peer_serve_name pvar) then you need
>  > at least the 1.0 version of openssl. If you don't you can stick with the
>  > older version.
> 
> without TLS server name extensions, TLS does not work in multi-domain
> environment?  

It does, but you have to use a separate IP address for each domain.

> if so, looks like 1.0 is a must.  

It's not a must, but configuring tls in multi-domain mode becomes slightly
more complicated.

By the way, is anyone aware of a user agent that supports TLS with the server
name extension?

   Jan.



More information about the sr-dev mailing list