Project

General

Profile

Actions

Feature #1064

closed

Add support for TLS Servername Indication (SNI) in DCMTK

Added by Marco Eichelberg over 2 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Category:
Library and Apps
Target version:
Start date:
2023-02-06
Due date:
% Done:

100%

Estimated time:
Module:
dcmtls
Operating System:
Compiler:

Description

With TLS Server Name Indication (SNI), a TLS server can have multiple certificates installed on the same IP address. SNI-capable clients will specify the hostname of the server they’re trying to reach during the initial handshake process. This allows the TLS server to determine the correct certificate to use for the connection.

It would be a useful extension to DCMTK's TLS clients to add a command line enabling SNI. In OpenSSL, this might be as simple as calling the following function:
int SSL_set_tlsext_host_name(const SSL *s, const char *name);

Suggested 2023-02-03 by Yi Lu <>.

Actions

Also available in: Atom PDF