curl-library
Re: Trailing dot in FQDN TLS SNI/HTTP HostName
Date: Sat, 26 Apr 2014 19:00:52 +0200 (CEST)
On Tue, 22 Apr 2014, Leon Winter wrote:
> the problem I am encountering is probably a lack of normalization before
> sending a host name to a server (specifically the HostName field of SNI). If
> I am reading the RFC correctly the client has to normalize (e.g. eliminate
> the trailing dot) before sending this data to the server.
Yes, I agree with that interpretation. Here's the paragraph from RFC3546:
"HostName" contains the fully qualified DNS hostname of the server,
as understood by the client. The hostname is represented as a byte
string using UTF-8 encoding [UTF8], without a trailing dot.
You interested in taking a shot at a patch for this problem? It seems like it
may be a good idea to simply normalize (strip trailing dots) at a central
early point in time.
-- / daniel.haxx.se ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2014-04-26