[THRIFT-3892] Thrift uses TLS SNI extension provided by OpenSSL library. Older version of OpenSSL(< 0.9.8f) may create problem because they do not support 'SSL_set_tlsext_host_name()'.

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 0.11.0
• Component/s: C++ - Compiler
• Labels: newbie
• Patch Info: Patch Available
• Flags: Patch
• Assignee: James E. King III
• Reporter: Udit Raikwar
• Created: 03/Aug/16 16:25
• Updated: 14/Dec/17 13:55
• Resolved: 25/Jan/17 14:44

Description

Thrift uses TLS SNI extension during SSL handshake provided by OpenSSL library. Older version of OpenSSL(< 0.9.8f) may create problem because they do not support 'SSL_set_tlsext_host_name()'.

I have created a pull request regarding this issue[1], this issue is although negligible because all newer version of OpenSSL supports TLS SNI extension but checking if TLS SNI extension is supported in user's OpenSSL version is not bad.

[1]=https://github.com/apache/thrift/pull/1057

Issue Links

• links to: GitHub Pull Request #1057