[Question] Should SNI be parsed early in a ClientHello callback à la OpenSSL? about wolfssl

[anhu]

I think I understand now,
in doc/dox_comments/header_files/ssl.h please look up the following APIs:

• wolfSSL_UseSNI
• wolfSSL_CTX_UseSNI
• wolfSSL_SNI_SetOptions
• wolfSSL_CTX_SNI_SetOptions
• wolfSSL_SNI_GetFromBuffer
• wolfSSL_SNI_Status
• wolfSSL_SNI_GetRequest

That file show examples for how to use each of these APIs. You can find further examples of how to use this APIs in examples/server/server.c, examples/client/client.c and tests/api.c . I hope this helps!!

Warm regards, Anthony

[anhu]

Hello @space88man ,

These APIs are part of our OpenSSL compatibility layer. We recommend that you use these APIs as they would be expected to be used if you were building against OpenSSL.

Please let me know if you have any further questions.

Warm regards, Anthony

[space88man]

Thanks @anhu : in my code I'm not expected to use the OpenSSL compatibility layer — what is the "correct" wolfSSL-way of doing SNI (and switching out the WOLFSSL_CTX *)?

Hello @space88man ,

These APIs are part of our OpenSSL compatibility layer. We recommend that you use these APIs as they would be expected to be used if you were building against OpenSSL.

Please let me know if you have any further questions.

Warm regards, Anthony