[botan-devel] Remote DoS/crash in TLS code

Jack Lloyd lloyd at randombit.net
Fri Dec 23 17:09:27 EST 2011


On Fri, Dec 23, 2011 at 10:48:59PM +0100, Stephan Jauernick wrote:
> Hi Jack,
> 
> I would like to see Botan support Server Name Indication[1].
> It would be great for potential webservers using botan!

You're in luck, that is actually the only extension currently
supported. ;) In the current API, if the client sent SNI, it will be
available as the return value of TLS_Server::requested_hostname().

-Jack



More information about the botan-devel mailing list