[fossil-users] SSL SNI support

2011-12-14 Thread BohwaZ
Hi there, I tried to setup my first repository on a remote server today and I had quite a few problems with Fossil and SSL. First I had doubts about binary integrity, because it was way larger than usual, but hashs seemed to match so I tried and then I had this error: Server:https://boh...@f

Re: [fossil-users] SSL SNI support

2011-12-15 Thread Dmitry Chestnykh
On Thu, 15 Dec 2011 01:43:42 +0100 BohwaZ wrote: > Server:https://boh...@fossil.kd2.org/garradin/ > Bytes Cards Artifacts Deltas > Sent: 279 4 0 0 > waiting for server...fossil: relocation > error: /lib/libnss_mdns4_minimal.so.2:

Re: [fossil-users] SSL SNI support

2011-12-15 Thread Dmitry Chestnykh
On Thu, 15 Dec 2011 01:43:42 +0100 BohwaZ wrote: > So it appears that Fossil doesn't support SNI. > > I did a small patch in src/http_ssl.c and it seems to work, but maybe > it's not the best code for that purpose as I usually don't work in C: > > 214a215 > > SSL_set_tlsext_host_name(ssl, g.ur

Re: [fossil-users] SSL SNI support

2011-12-15 Thread Richard Hipp
On Thu, Dec 15, 2011 at 5:57 AM, Dmitry Chestnykh wrote: > On Thu, 15 Dec 2011 01:43:42 +0100 BohwaZ wrote: > > > Server:https://boh...@fossil.kd2.org/garradin/ > > Bytes Cards Artifacts Deltas > > Sent: 279 4 0 0 > > waiting for

Re: [fossil-users] SSL SNI support

2011-12-15 Thread Dmitry Chestnykh
On Thu, 15 Dec 2011 07:26:27 -0500 Richard Hipp wrote: > Dynamic linking means going without SSL, which many Linux systems do > not have installed. Maybe focus on providing deb/rpm for Linux? Alternatively -- wild idea -- maybe we can use dlopen() at runtime to provide SSL support if OpenSSL is i

Re: [fossil-users] SSL SNI support

2011-12-15 Thread LluĂ­s Batlle i Rossell
On Thu, Dec 15, 2011 at 11:57:50AM +0100, Dmitry Chestnykh wrote: > On Thu, 15 Dec 2011 01:43:42 +0100 BohwaZ wrote: > > > Server:https://boh...@fossil.kd2.org/garradin/ > > Bytes Cards Artifacts Deltas > > Sent: 279 4 0 0 > > wa

Re: [fossil-users] SSL SNI support

2011-12-15 Thread Stephan Beal
On Thu, Dec 15, 2011 at 2:02 PM, Dmitry Chestnykh wrote: > Alternatively -- wild idea -- maybe we can use dlopen() at runtime to > provide SSL support if OpenSSL is installed? > FWIW, using dlopen() prohibits (on Linux) proper static linking as well: [stephan@cheyenne:~/tmp]$ cat foo.c #include