Branch: refs/heads/master
Home: https://github.com/openSUSE/osc
Commit: c62c9f54a0b3f381c613de446e94dd10bfb523be
https://github.com/openSUSE/osc/commit/c62c9f54a0b3f381c613de446e94dd10bfb52...
Author: Oleg Girko
Date: 2015-08-13 (Thu, 13 Aug 2015)
Changed paths:
M osc/oscssl.py
Log Message:
-----------
Add support for TLS SNI if M2Crypto supports it.
Currently osc can't access API URLs which share the same IP address
with other SSL-enabled sites, complaining about certificate
not matching hostname.
This change solves this problem by instructing M2Crypto.SSL.Connection
to send the desired hostname to https server using TLS SNI extension,
thus allowing the server to present the right certificate and choose
the right virtual site.
This is useful for those who can't afford to have a separate IP address
for OBS API.
For TLS SNI to work correctly, M2Crypto should be patched:
https://bugzilla.osafoundation.org/show_bug.cgi?id=13073
Some distributions (like Fedora) already include this patch.
For unpatched M2Crypto osc degrades to operation without TLS SNI.
Signed-off-by: Oleg Girko
Commit: c23e20bc29b481ca4a3555e450d83259f7b58d5d
https://github.com/openSUSE/osc/commit/c23e20bc29b481ca4a3555e450d83259f7b58...
Author: Adrian Schröter
Date: 2015-08-13 (Thu, 13 Aug 2015)
Changed paths:
M osc/oscssl.py
Log Message:
-----------
Merge pull request #166 from OlegGirko/add-tls-sni
Add support for TLS SNI if M2Crypto supports it.
Compare: https://github.com/openSUSE/osc/compare/a031dbd0830b...c23e20bc29b4
