search

noxxi / p5-io-socket-ssl

IO::Socket::SSL Perl Module
36 stars 59 forks source link

Pessimistic version number for SNI support in OpenSSL #12

Closed GeJ closed 10 years ago

GeJ commented 10 years ago

Reading the code (SSL.pm:41), it looks like you're requesting OpenSSL 1.0.0 to enable client SNI. After some research it seems that SNI was enabled (by default, prior to that it was a configure flag one had to enable by hand) in OpenSSL 0.9.8j. According to http://www.openssl.org/docs/crypto/OPENSSL_VERSION_NUMBER.html this would be : 0x0009080af After changing 0x010000000 to this value, I was able to correctly install the latest version of IO::Socket::SSL without errors.

Would you like me to make a proper PR for this?

Thank you for your work on this distribution, it actually saved my bacon a couple of weeks ago when some other language was getting on my nerves. You can't beat the Internet Swiss army chainsaw that comes with Perl.

noxxi commented 10 years ago

Like written in the section SNI support of the documentation the initial support for SNI in OpenSSL was buggy. Because SSL problems are usually very hard to debug I decided therefore, that I make support for SNI only available on versions of OpenSSL which not only claim to have an implementation but are known to work. See RT #83289 and Issue#11 for more details.