Re: Apache Benchmark SNI SSL

2016-07-02 Thread Yann Ylavic
On Sat, Jul 2, 2016 at 2:02 PM, Kean Johnston wrote: > On 2016-07-01 5:22 PM, Yann Ylavic wrote: >> >> http://home.apache.org/~ylavic/patches/httpd-2.4.x-ab_sni.patch. > > This line worries me: > > +#if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) > >

Re: Apache Benchmark SNI SSL

2016-07-02 Thread Kean Johnston
On 2016-07-01 5:22 PM, Yann Ylavic wrote: http://home.apache.org/~ylavic/patches/httpd-2.4.x-ab_sni.patch. This line worries me: +#if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) That assumes that SSL_set_tlsext_host_name will always be implemented as a macro by OpenSSL,

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 4:05 PM, William A Rowe Jr wrote: > Yup, no extra steps for correct behavior. > > I'd support a ''surpress SNI' flag, and/or an explicit SNI arg, much like > openssl s_client -- just for testing. But that should be the exceptional > case. Done, so that

Re: Apache Benchmark SNI SSL

2016-07-01 Thread William A Rowe Jr
Yup, no extra steps for correct behavior. I'd support a ''surpress SNI' flag, and/or an explicit SNI arg, much like openssl s_client -- just for testing. But that should be the exceptional case. On Jul 1, 2016 8:33 AM, "Reindl Harald" wrote: Am 01.07.2016 um 15:23

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Reindl Harald
Am 01.07.2016 um 15:23 schrieb Yann Ylavic: On Fri, Jul 1, 2016 at 3:17 PM, Yann Ylavic wrote: On Fri, Jul 1, 2016 at 3:02 PM, Reindl Harald wrote: Am 01.07.2016 um 14:41 schrieb Yann Ylavic: The -I does not take any argument, it tells ab to

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 3:17 PM, Yann Ylavic wrote: > On Fri, Jul 1, 2016 at 3:02 PM, Reindl Harald wrote: >> >> Am 01.07.2016 um 14:41 schrieb Yann Ylavic: >>> >>> The -I does not take any argument, it tells ab to use iether the -H >>> "Host: ..." if

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 3:02 PM, Reindl Harald wrote: > > Am 01.07.2016 um 14:41 schrieb Yann Ylavic: >> >> The -I does not take any argument, it tells ab to use iether the -H >> "Host: ..." if any, or the host from the given URL otherwise > > but why is there a param

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Reindl Harald
Am 01.07.2016 um 14:41 schrieb Yann Ylavic: On Fri, Jul 1, 2016 at 1:44 PM, Pietro Paolini wrote: On 1 July 2016 at 11:18, Pietro Paolini wrote: Is it correct ? It does not look good to me. -while ((status = apr_getopt(opt,

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 1:44 PM, Pietro Paolini wrote: > > On 1 July 2016 at 11:18, Pietro Paolini wrote: >> >> Is it correct ? It does not look good to me. >> >> -while ((status = apr_getopt(opt, >>

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Pietro Paolini
On 1 July 2016 at 11:18, Pietro Paolini wrote: > > > On 30 June 2016 at 19:55, Yann Ylavic wrote: > >> On Thu, Jun 30, 2016 at 7:21 PM, Pietro Paolini >> wrote: >> > >> > I have built the httpd-2-.4.20 tarball but the

Re: Apache Benchmark SNI SSL

2016-07-01 Thread Pietro Paolini
On 30 June 2016 at 19:55, Yann Ylavic wrote: > On Thu, Jun 30, 2016 at 7:21 PM, Pietro Paolini > wrote: > > > > I have built the httpd-2-.4.20 tarball but the problem is still there, > has > > it been fixed in newer version ? is there a workaround

Re: Apache Benchmark SNI SSL

2016-06-30 Thread Reindl Harald
Am 30.06.2016 um 20:55 schrieb Yann Ylavic: On Thu, Jun 30, 2016 at 7:21 PM, Pietro Paolini wrote: I have built the httpd-2-.4.20 tarball but the problem is still there, has it been fixed in newer version ? is there a workaround for that ? SNI handling just added

Re: Apache Benchmark SNI SSL

2016-06-30 Thread Yann Ylavic
On Thu, Jun 30, 2016 at 7:21 PM, Pietro Paolini wrote: > > I have built the httpd-2-.4.20 tarball but the problem is still there, has > it been fixed in newer version ? is there a workaround for that ? SNI handling just added to ab in http://svn.apache.org/r1750854. It

Re: Apache Benchmark SNI SSL

2016-06-30 Thread Stefan Eissing
You might want to try adding the ppa by ondrej to your apt-get source and install a newer apache and opensll from there. That should give you an ab with openssl 1.0.2 linked. https://launchpad.net/%7Eondrej/+archive/ubuntu/apache2 > Am 30.06.2016 um 19:21 schrieb Pietro Paolini

Apache Benchmark SNI SSL

2016-06-30 Thread Pietro Paolini
Hi all, I apologise in advance, if this is not the right place where to post such question. I have tried to use the ab tool which comes with the apache package of my Ubuntu 14.04 distro to stress test a web server, such server lies behind a CDN and the use of the TLS Server Name Indication is