[openssl-commits] [openssl] master update

Richard Levitte levitte at openssl.org
Wed Mar 29 05:27:50 UTC 2017

The branch master has been updated
       via  8c55c4614731487449a02f90ff9a209ff6c63447 (commit)
      from  a01dbac232166563cdeafcbe31f321c05d164a10 (commit)

- Log -----------------------------------------------------------------
commit 8c55c4614731487449a02f90ff9a209ff6c63447
Author: Jon Spillett <jon.spillett at oracle.com>
Date:   Wed Mar 29 08:34:37 2017 +1000

    Add documentation for SNI APIs
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3071)


Summary of changes:
 .../SSL_CTX_set_tlsext_servername_callback.pod     | 62 ++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 doc/man3/SSL_CTX_set_tlsext_servername_callback.pod

diff --git a/doc/man3/SSL_CTX_set_tlsext_servername_callback.pod b/doc/man3/SSL_CTX_set_tlsext_servername_callback.pod
new file mode 100644
index 0000000..3b0a509
--- /dev/null
+++ b/doc/man3/SSL_CTX_set_tlsext_servername_callback.pod
@@ -0,0 +1,62 @@
+=head1 NAME
+SSL_CTX_set_tlsext_servername_callback, SSL_CTX_set_tlsext_servername_arg,
+SSL_get_servername_type, SSL_get_servername - handle server name indication
+=head1 SYNOPSIS
+ #include <openssl/ssl.h>
+ long SSL_CTX_set_tlsext_servername_callback(SSL_CTX *ctx,
+                                   int (*cb)(SSL *, int *, void *));
+ long SSL_CTX_set_tlsext_servername_arg(SSL_CTX *ctx, void *arg);
+ const char *SSL_get_servername(const SSL *s, const int type);
+ int SSL_get_servername_type(const SSL *s);
+SSL_CTX_set_tlsext_servername_callback() sets the application callback B<cb>
+used by a server to perform any actions or configuration required based on
+the servername extension received in the incoming connection. When B<cb>
+is NULL, SNI is not used. The B<arg> value is a pointer which is passed to
+the application callback.
+SSL_CTX_set_tlsext_servername_arg() sets a context-specific argument to be
+passed into the callback for this B<SSL_CTX>.
+SSL_get_servername() returns a servername extension value of the specified
+type if provided in the Client Hello or NULL.
+SSL_get_servername_type() returns the servername type or -1 if no servername
+is present. Currently the only supported type (defined in RFC3546) is
+=head1 NOTES
+The ALPN and SNI callbacks are both executed during Client Hello processing.
+The servername callback is executed first, followed by the ALPN callback.
+SSL_CTX_set_tlsext_servername_callback() and
+SSL_CTX_set_tlsext_servername_arg() both always return 1 indicating success.
+=head1 SEE ALSO
+L<ssl(7)>, L<SSL_CTX_set_alpn_select_cb(3)>,
+Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+Licensed under the OpenSSL license (the "License").  You may not use
+this file except in compliance with the License.  You can obtain a copy
+in the file LICENSE in the source distribution or at

More information about the openssl-commits mailing list