[openssl-dev] [openssl.org #2021] sni bug

2016-05-24 Thread Matt Caswell via RT
The code in this area has changed significantly so it is far from clear whether this report is still relevant. Therefore closing. Please open a new ticket if required. Matt -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=2021 Please log in as guest with password guest if prompted

Re: [openssl-dev] [openssl.org #2021] sni bug

2016-02-09 Thread Hubert Kario
On Saturday 06 February 2016 21:24:26 Peter Sylvester via RT wrote: > On 06/02/2016 15:50, Rich Salz via RT wrote: > > Is this still a bug? > > -- > > Rich Salz, OpenSSL dev team; rs...@openssl.org > > I don't know, there have been many changes to the extension treatment. > I have not followed

Re: [openssl-dev] [openssl.org #2021] sni bug

2016-02-08 Thread Salz, Rich via RT
> A correct logic is one single function(the code of check and parse combined) > that collects the values of extensions and then treat them calls callbacks in > a > defined order. Yes, but right now we've got what we've got :) > Actually it seems that you could influence the server behavoiur

Re: [openssl-dev] [openssl.org #2021] sni bug

2016-02-08 Thread Salz, Rich
> A correct logic is one single function(the code of check and parse combined) > that collects the values of extensions and then treat them calls callbacks in > a > defined order. Yes, but right now we've got what we've got :) > Actually it seems that you could influence the server behavoiur

Re: [openssl-dev] [openssl.org #2021] sni bug

2016-02-06 Thread Peter Sylvester via RT
On 06/02/2016 15:50, Rich Salz via RT wrote: > Is this still a bug? > -- > Rich Salz, OpenSSL dev team; rs...@openssl.org > > I don't know, there have been many changes to the extension treatment. I have not followed the stuff since 5 years. The extension handling is not what I had in the

[openssl-dev] [openssl.org #2021] sni bug

2016-02-06 Thread Rich Salz via RT
Is this still a bug? -- Rich Salz, OpenSSL dev team; rs...@openssl.org -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=2021 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl.org #2021] sni bug

2009-08-25 Thread Peter Sylvester via RT
hi, the implementation of sni in openssl probaly does not correspond to the rfc. The rfc seems to allow to change the servername at any time in a client hello, and the servernamehello extension is wrong when the client has changed the servername (the name is not acknoledged but no client actually