Apache 2.2 SNI support

[Zachary Schneider]

Binary package hint: apache2

I am writing to see if this of enough importance to get this patch into the apache version that will ship with Hardy.

A discussion from ASF along with the patch can be found here:
http://issues.apache.org/bugzilla/show_bug.cgi?id=34607

It looks like the patch has been applied to trunk, I think this would be the future 2.4 release.
However there is a patch available for the 2.2 tree that enables SNI support.

I am currently working on getting SNI support into safari (apple developer bug reports), having it in the next ubuntu LTS release would most likely be welcomed by many hosting companies.

Thank You.

[Mathias Gug (mathiaz)]

In order to get SNI support, openssl needs to be compiled with the enable-tlsext option.

[Mathias Gug (mathiaz)]

Support for tls extension in openssh have been asked in bug 186844.

[Nicolas Valcarcel (nvalcarcel)]

didn't you mean openssl instead of openssh?

[Mathias Gug (mathiaz)]

Yes - I meant openssl

[Mathias Gug (mathiaz)]

It seems that there are some security issues with the current SNI patch for 2.2.

They may be resolved in the 2.4 branch which should be backported to 2.2.

[Chuck Short (zulcss)]

This is fixed for Intrepid.

[Chuck Short (zulcss)]

This is fixed for karmic.

Regards
chuck

[cc (codecrumb)]

Are there any plans to backport this to hardy?