[sr-dev] TLS SNI name servers

Olle E. Johansson oej at edvina.net
Thu Jan 15 15:10:39 CET 2015


Hi!

Just to get back to a previous discussion. A few days ago I compared the current TLS module code with the TLS code in 1.5. The TLS server name extensions is in the 1.5 code but not in the current code. Somehow they got lost in the merger of Kamailio and SER.

I haven't had time to look into it deeply, but it did not look too hard to find all the changes needed as they usually was placed in between #ifdef statements - not all versions of OpenSSL supports TLS 1.0 extensions.

To summarize: No TLS SNI support in the current TLS implementation. Need hacker.

/O


More information about the sr-dev mailing list