[RFH/PATCH] imap-send: support SNI (RFC4366)

2013-02-20 Thread Junio C Hamano
To talk to a site that serves multiple names on a single IP address, the client needs to ask for the specific hostname it wants to talk to. Otherwise, the default certificate returned from the IP address may not match that of the host we wanted to talk to. Signed-off-by: Junio C Hamano

Re: [RFH/PATCH] imap-send: support SNI (RFC4366)

2013-02-20 Thread Junio C Hamano
Junio C Hamano gits...@pobox.com writes: To talk to a site that serves multiple names on a single IP address, the client needs to ask for the specific hostname it wants to talk to. Otherwise, the default certificate returned from the IP address may not match that of the host we wanted to talk

Re: [RFH/PATCH] imap-send: support SNI (RFC4366)

2013-02-20 Thread Jeff King
On Wed, Feb 20, 2013 at 09:35:16PM -0800, Junio C Hamano wrote: (2) I do not know if everybody has SSL_set_tslext_host_name() macro defined, so this patch may be breaking build for people with different versions of OpenSSL. [...] +#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME + /* +