Re: [openssl-users] Early data based on SNI with OpenSSL 1.1.1

2017-10-26 Thread Olivier Houchard
Hi Matt, Sorry for the late answer. On Mon, Oct 23, 2017 at 04:31:02PM +0100, Matt Caswell wrote: > > > On 23/10/17 16:16, Olivier Houchard wrote: > > Hi, > > > > I'm trying to use OpenSSL 1.1.1 to accept or reject early data based on > > the SNI, and I'm a bit confused on how to do so. > >

Re: [openssl-users] Early data based on SNI with OpenSSL 1.1.1

2017-10-23 Thread Matt Caswell
On 23/10/17 16:16, Olivier Houchard wrote: > Hi, > > I'm trying to use OpenSSL 1.1.1 to accept or reject early data based on > the SNI, and I'm a bit confused on how to do so. > The problem I have is, I don't know the SNI before the client hello > callback is called, and at that time it seems

[openssl-users] Early data based on SNI with OpenSSL 1.1.1

2017-10-23 Thread Olivier Houchard
Hi, I'm trying to use OpenSSL 1.1.1 to accept or reject early data based on the SNI, and I'm a bit confused on how to do so. The problem I have is, I don't know the SNI before the client hello callback is called, and at that time it seems to be too late to make a decision for early data. Either