php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Doc Bug #50336 [TBD] for server name indication support in openssl
Submitted: 2009-11-30 15:33 UTC Modified: 2009-12-23 16:18 UTC
From: lbarnaud@php.net Assigned: kalle (profile)
Status: Closed Package: Documentation problem
PHP Version: 5.3SVN-2009-11-30 (snap) OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: lbarnaud@php.net
New email:
PHP Version: OS:

 

 [2009-11-30 15:33 UTC] lbarnaud@php.net
Description:
------------
Document sni support in openssl.

Since 5.3.2.

New SSL context options :

- SNI_enabled : Set to FALSE to disable SNI support (enabled by default)
- SNI_server_name : If not set, the server name will be guessed from the stream URL (e.g. https://example.com/ will use example.com as hostname.), else the given name will be used.

SNI is to SSL/TLS what the Host header is to HTTP : it allows multiple
certificates on the same IP address. As for HTTP virtual hosts, this should be totaly transparent in most cases.

Context options allows more control, e.g. :
 
$context = stream_context_create(array(
  'ssl' => array('SNI_server_name' => 'foo.example.com'),
  'http' => array('header' => 'Host: foo.example.com'),
));
file_get_contents('https://127.0.0.1/', false, $context);

OpenSSL >= 0.9.8j supports SNI (by default since OpenSSL 0.9.8k).

New constant :

OPENSSL_TLSEXT_SERVER_NAME is defined if there is support for SNI.




Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-11-30 15:34 UTC] lbarnaud@php.net
open -> tbd
 [2009-12-23 16:18 UTC] svn@php.net
Automatic comment from SVN on behalf of kalle
Revision: http://svn.php.net/viewvc/?view=revision&revision=292542
Log: Documented SNI support in OpenSSL from 5.3.2 (closes #50336)
 [2009-12-23 16:18 UTC] kalle@php.net
This bug has been fixed in the documentation's XML sources. Since the
online and downloadable versions of the documentation need some time
to get updated, we would like to ask you to be a bit patient.

Thank you for the report, and for helping us make our documentation better.


 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu May 16 07:01:33 2024 UTC