Hi,
> I'm fine with this. We can always bite the bullet and add tweaks and go
> through hoops if someone ends up with a problem. It makes sense to not
> make a lot of code for work-arounds to problems that may in fact never show up!
ok, I take this as agreement for the rest of Kaspar's SNI patch which I've just commited.

all others: please test current CVS / snapshot code, and report about any issues you find related to this new feature!
To enable / test SNI remember that you have to compile OpenSSL 0.9.8 line with 'enable-tlsext'; OpenSSL 0.9.9-dev and the other current SSL toolkits support this tls extension by default.
Kaspar has also created a test site where you can test that it works; the main page url is:
https://sni.velox.ch/
check this page with your browser, and fetch the root certificate for further testing.

There's more than a month till next sheduled release which should be enough time to find any outstanding issues.

thanks, Guen.
Received on 2008-02-26