curl-users
Re: ssl handshake failure with xfb gateway ftps server
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 21 Jul 2009 23:19:56 +0200 (CEST)
Date: Tue, 21 Jul 2009 23:19:56 +0200 (CEST)
On Tue, 21 Jul 2009, Gilles Hamel wrote:
>> I'd say that wireshark and gdb are two good tools to use for this. And you
>> probably also need to read up on some SSL/TLS details....
> Wireshark reveals that SNI (Server Name Indication) enabled by default in
> TLSv1 raises the handshake failure. If we use the server IP address or if we
> switch to SSLv3, the handshake goes to the end successfully. I see in this
> thread http://curl.haxx.se/mail/lib-2008-02/0050.html talks about an option
> to disable SNI extension, but it doesn't exist ...
Oh right, it seems nobody every wrote support for such an option. Feel free to
step uo and do it. We'll appreciate your patch!
-- / daniel.haxx.se ------------------------------------------------------------------- List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users FAQ: http://curl.haxx.se/docs/faq.html Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2009-07-21