Daniel Stenberg wrote:
>
> I'd say that wireshark and gdb are two good tools to use for this. And
> you probably also need to read up on some SSL/TLS details....
Wireshark reveals that SNI (Server Name Indication) enabled by default
in TLSv1 raises the handshake failure. If we use the server IP address
or if we switch to SSLv3, the handshake goes to the end successfully.
I see in this thread http://curl.haxx.se/mail/lib-2008-02/0050.html
talks about an option to disable SNI extension, but it doesn't exist ...
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2009-07-21