Azure / azure-uamqp-python

AMQP 1.0 client library for Python
MIT License
57 stars 48 forks source link

Update tlsio_openssl module in vendor azure-c-shared-utility to enable sending SNI #167

Closed yunhaoling closed 3 years ago

yunhaoling commented 4 years ago

Problem:

uamqp on linux can't establish connection over web socket to the service when there's an Azure Fire wall.

Root cause:

azure-c-shared-utility uses OpenSSL when running on Linux, but uses SChannel when running on Windows. By default, OpenSSL does not send an SNI extension during the SSL handshake but Windows SChannel does. When using Application Rules, if the SNI is missing, Azure Firewall drops the packet. Below I’m showing a screen capture of the firewall rules:

Reproduce:

Related issue and pr:

yunhaoling commented 3 years ago

this is fixed in the latest uamqp v1.2.11 release