cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: ssl handshake failure with xfb gateway ftps server

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 21 Jul 2009 23:19:56 +0200 (CEST)

On Tue, 21 Jul 2009, Gilles Hamel wrote:

>> I'd say that wireshark and gdb are two good tools to use for this. And you
>> probably also need to read up on some SSL/TLS details....

> Wireshark reveals that SNI (Server Name Indication) enabled by default in
> TLSv1 raises the handshake failure. If we use the server IP address or if we
> switch to SSLv3, the handshake goes to the end successfully. I see in this
> thread http://curl.haxx.se/mail/lib-2008-02/0050.html talks about an option
> to disable SNI extension, but it doesn't exist ...

Oh right, it seems nobody every wrote support for such an option. Feel free to
step uo and do it. We'll appreciate your patch!

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2009-07-21