Fossil

Check-in [4f1709d7]
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:one more .....
Downloads: Tarball | ZIP archive | SQL archive
Timelines: family | ancestors | descendants | both | jan-httpsproxytunnel
Files: files | file ages | folders
SHA1: 4f1709d71bb1f68ba8d041e171ad323f4d3de7dc
User & Date: jan.nijtmans 2014-02-05 15:20:08
Context
2014-02-06
13:42
Add support for tunneling https through a http proxy (Ticket [e854101c4f]) check-in: 3a334356 user: jan.nijtmans tags: trunk
2014-02-05
15:20
one more ..... Closed-Leaf check-in: 4f1709d7 user: jan.nijtmans tags: jan-httpsproxytunnel
14:59
Use hostname in stead of proxy name in certificate handling. Attempt to fix the problem described here: https://www.mail-archive.com/fossil-users@lists.fossil-scm.org/msg13898.html check-in: 6673f163 user: jan.nijtmans tags: jan-httpsproxytunnel
Changes
Hide Diffs Unified Diffs Ignore Whitespace Patch

Changes to src/http_ssl.c.

281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
    ssl_set_errmsg("SSL: cannot open SSL (%s)", 
                    ERR_reason_error_string(ERR_get_error()));
    return 1;
  }
  BIO_get_ssl(iBio, &ssl);

#if (SSLEAY_VERSION_NUMBER >= 0x00908070) && !defined(OPENSSL_NO_TLSEXT)
  if( !SSL_set_tlsext_host_name(ssl, pUrlData->hostname) ){
    fossil_warning("WARNING: failed to set server name indication (SNI), "
                  "continuing without it.\n");
  }
#endif

  SSL_set_mode(ssl, SSL_MODE_AUTO_RETRY);








|







281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
    ssl_set_errmsg("SSL: cannot open SSL (%s)", 
                    ERR_reason_error_string(ERR_get_error()));
    return 1;
  }
  BIO_get_ssl(iBio, &ssl);

#if (SSLEAY_VERSION_NUMBER >= 0x00908070) && !defined(OPENSSL_NO_TLSEXT)
  if( !SSL_set_tlsext_host_name(ssl, pUrlData->useProxy?pUrlData->hostname:pUrlData->name) ){
    fossil_warning("WARNING: failed to set server name indication (SNI), "
                  "continuing without it.\n");
  }
#endif

  SSL_set_mode(ssl, SSL_MODE_AUTO_RETRY);