cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Trailing dot in FQDN TLS SNI/HTTP HostName

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Sat, 26 Apr 2014 19:00:52 +0200 (CEST)

On Tue, 22 Apr 2014, Leon Winter wrote:

> the problem I am encountering is probably a lack of normalization before
> sending a host name to a server (specifically the HostName field of SNI). If
> I am reading the RFC correctly the client has to normalize (e.g. eliminate
> the trailing dot) before sending this data to the server.

Yes, I agree with that interpretation. Here's the paragraph from RFC3546:

    "HostName" contains the fully qualified DNS hostname of the server,
    as understood by the client. The hostname is represented as a byte
    string using UTF-8 encoding [UTF8], without a trailing dot.

You interested in taking a shot at a patch for this problem? It seems like it
may be a good idea to simply normalize (strip trailing dots) at a central
early point in time.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2014-04-26