You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "James E. King, III (JIRA)" <ji...@apache.org> on 2017/01/25 14:45:26 UTC

[jira] [Resolved] (THRIFT-3892) Thrift uses TLS SNI extension provided by OpenSSL library. Older version of OpenSSL(< 0.9.8f) may create problem because they do not support 'SSL_set_tlsext_host_name()'.

     [ https://issues.apache.org/jira/browse/THRIFT-3892?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

James E. King, III resolved THRIFT-3892.
----------------------------------------
       Resolution: Fixed
         Assignee: James E. King, III
    Fix Version/s: 0.11.0

> Thrift uses TLS SNI extension provided by OpenSSL library. Older version of OpenSSL(< 0.9.8f) may create problem because they do not support 'SSL_set_tlsext_host_name()'.
> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: THRIFT-3892
>                 URL: https://issues.apache.org/jira/browse/THRIFT-3892
>             Project: Thrift
>          Issue Type: Improvement
>          Components: C++ - Compiler
>            Reporter: Udit Raikwar
>            Assignee: James E. King, III
>            Priority: Trivial
>              Labels: newbie
>             Fix For: 0.11.0
>
>
> Thrift uses TLS SNI extension during SSL handshake provided by OpenSSL library. Older version of OpenSSL(< 0.9.8f) may create problem because they do not support 'SSL_set_tlsext_host_name()'.
> I have created a pull request regarding this issue[1], this issue is although negligible because all newer version of OpenSSL supports TLS SNI extension but checking if TLS SNI extension is supported in user's OpenSSL version is not bad.
> [1]=https://github.com/apache/thrift/pull/1057



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)