Hello,

lftp does not support http://en.wikipedia.org/wiki/Server_Name_Indication
GnuTLS and OpenSSL both support it (OpenSSL by default since 0.9.8j).
Test site: https://sni.velox.ch/

Using latest lftp with GnuTLS/OpenSSL the test fails:
$ src/lftp -c 'get https://sni.velox.ch/x'; grep lftp x; rm -f x
<p><strong>Unfortunately, your client </strong>[lftp/4.4.3

Libraries used: Readline 6.1, Expat 2.1.0, GnuTLS 2.8.6, zlib 1.2.3.4
Libraries used: Readline 6.1, Expat 2.1.0, OpenSSL 0.9.8o 01 Jun 2010,
zlib 1.2.3.4

It works with cURL:
$ curl -s https://sni.velox.ch/x | grep curl/
<p><strong>Great! Your client </strong>[curl/7.21.0...

Seeing how cURL does it [1] [2] I made a quick patch [3] that works
for both GnuTLS and OpenSSL:
$ src/lftp -c 'get https://sni.velox.ch/x'; grep lftp x; rm -f x
<p><strong>Great! Your client </strong>[lftp/4.4.3

Cheers,
StalkR

[1] https://github.com/bagder/curl/blob/master/lib/ssluse.c#L1645
[2] https://github.com/bagder/curl/blob/master/lib/gtls.c#L464
[3] http://stalkr.net/lftp_sni.diff
_______________________________________________
lftp mailing list
lftp@uniyar.ac.ru
http://univ.uniyar.ac.ru/mailman/listinfo/lftp

Reply via email to