From owner-freebsd-hackers@FreeBSD.ORG  Sat Dec 28 13:02:44 2013
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 9CC41608;
 Sat, 28 Dec 2013 13:02:44 +0000 (UTC)
Received: from mail.tyknet.dk (mail.tyknet.dk
 [IPv6:2a01:4f8:201:2327:144:76:253:226])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 54F1B1B24;
 Sat, 28 Dec 2013 13:02:44 +0000 (UTC)
Received: from [10.10.1.214] (217.71.4.82.static.router4.bolignet.dk
 [217.71.4.82])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.tyknet.dk (Postfix) with ESMTPSA id 4BE1E182A7D;
 Sat, 28 Dec 2013 13:02:42 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.8.3 mail.tyknet.dk 4BE1E182A7D
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default;
 t=1388235762; bh=nVXqqs9sLJ4l6/jpe3t9lFTQaanuSJFXOfmAXe4DNhs=;
 h=Date:From:To:CC:Subject:References:In-Reply-To;
 b=f3nL1deV/Q1cmyxX9BIdEqlKmGnh4MMqANLoQDvusDz8OCUXmPuoI6qy7fn4ScJUQ
 hjjeTRnm2A7HTdfTWh+xE8MouCFa46GxWgHNCQqVI0rjgfRFgnniNkAwvkS1xnFV9/
 uw807MohTdhtsZXHIgtab2iknUBD/GBaFR60BDlY=
Message-ID: <52BECBE8.8080906@gibfest.dk>
Date: Sat, 28 Dec 2013 14:02:32 +0100
From: Thomas Steen Rasmussen <thomas@gibfest.dk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: Sofian Brabez <sbz@FreeBSD.org>, freebsd-hackers@FreeBSD.org
Subject: Re: [patch] TLS Server Name Indication (SNI) support for fetch(1)
References: <20130608205653.GA8765@ogoshi.int.nbs-system.com>
In-Reply-To: <20130608205653.GA8765@ogoshi.int.nbs-system.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: =?ISO-8859-1?Q?Dag-Erling_Sm=F8rgrav?= <des@FreeBSD.org>
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Dec 2013 13:02:44 -0000

On 08-06-2013 22:56, Sofian Brabez wrote:
> Hi,
>
> fetch(1) currently does not support TLS extension Server Name Indication (RFC
> 6066) [1] when dealing with SSL. Nowadays lot of clients and servers implement
> this extension.
Hello!

fetch(1) is still missing SNI support as of r259440 - any chance of 
seeing this patch committed ?
As ipv4 depletion gets worse we will see SSL websites using SNI more and 
more. This is overdue.

Thanks, and may you all have a wonderful new year!

/Thomas Steen Rasmussen