Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding SNI extension if available #787

Merged
merged 3 commits into from
Aug 12, 2024
Merged

Conversation

thierryba
Copy link
Contributor

@thierryba thierryba commented Aug 9, 2024

This adds the SNI extension and completes the ability to use nits-server per instance in the cloud with automatic load balancing.

This fixes #786

src/conn.c Show resolved Hide resolved
@thierryba
Copy link
Contributor Author

@kozlovic if we'd have a simple tcp server that could listen to connection we could probably configure the client to connect to it with tls_handshake_first... and we could check that the client hello does contain the SNI extension (which is in clear). Would that make sense?

@thierryba thierryba marked this pull request as draft August 12, 2024 07:27
@thierryba thierryba marked this pull request as ready for review August 12, 2024 07:39
Copy link
Member

@kozlovic kozlovic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, that is the type of test that would verify that the hostname is actually set. Just made some requests to tweak few things.

test/test.c Show resolved Hide resolved
test/test.c Show resolved Hide resolved
test/test.c Show resolved Hide resolved
test/test.c Show resolved Hide resolved
test/test.c Show resolved Hide resolved
test/test.c Show resolved Hide resolved
Copy link
Member

@kozlovic kozlovic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks for adding this test!

@levb levb merged commit c4a26a5 into nats-io:main Aug 12, 2024
17 checks passed
@levb
Copy link
Collaborator

levb commented Aug 12, 2024

Thanks, @thierryba!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add SNI extension when connecting with TLS
3 participants