[Help-gnutls] RE: GNU TLS 2.2.4 installation

[Rajitha Reddy]

Hi,

Here is how I am calling the gnutls client:

gnutls-cli -d 10000 -p 6443 testserver

where
        testserver - name of the machine running the ssl server.
        6443 - port on which the server is listening.

Is this the right way of sending the servername extension to my ssl server?


With this, I am seeing that the gnu cli shows the following in its output:

|<2>| EXT[9dc5888]: Sending extension SERVER_NAME

My doubt is:

What is the difference between -srpusername and the field "testserver" in

"gnutls-cli -d 10000 -p 6443 testserver"

Thanks,
Reddy.

-----Original Message-----
From: Rajitha Reddy
Sent: Friday, November 14, 2008 11:06 AM
To: 'Simon Josefsson'
Cc: help-gnutls at gnu.org
Subject: RE: GNU TLS 2.2.4 installation

Thanks Simon.

So, the argument "your.server.org" is the name of my SSL server?

Thanks,
Rajitha.

-----Original Message-----
From: Simon Josefsson [mailto:simon at josefsson.org]
Sent: Friday, November 14, 2008 2:46 AM
To: Rajitha Reddy
Cc: help-gnutls at gnu.org
Subject: Re: GNU TLS 2.2.4 installation

Rajitha Reddy <RReddy at mocana.com> writes:

> Thanks for the information.
>
> I am trying to test my SSL Server on how it can handle the GNU TLS Client servername extension.
>
> Is this the file to be modified on the GNU TLS client to send servername extension?
> lib/gnutls_extensions.c

You don't have modify any source code to test it, just use the
gnutls-cli tool like this:

gnutls-cli -p 4711 your.server.org -d 4711

You'll see it send the extension if you see this:

|<2>| EXT[a04e070]: Sending extension SERVER_NAME

/Simon