[Pkg-openssl-devel] Bug#462596: Bug#462596: openssl: Please include support for tls extensions / server name indication

[Kurt Roeckx]

On Sat, Jan 26, 2008 at 12:25:02AM +0100, Stefan Fritsch wrote:
> Package: openssl
> Version: 0.9.8g-4
> Severity: wishlist
> 
> 
> Apache will probably start to support server name indication (SNI) in one of the
> next 2.2.x releases. To use it,  TLS extension support needs to be compiled into
> openssl. This has been added to openssl 0.9.8f but is not activated by default.
> 
> Please activate TLS extension support in the Debian package.

The problem with that option (and others) is that it changes struct
layouts, which means ABI changes.  I'm afraid I can't do such a change
without changing the soname.  It seems that only the end of struct's are
changed so we might get away with it for some cases, but someone will
need to take a good look before doing that.


Kurt