Server name Indication (SNI) support in CryptoPkg

Server name Indication (SNI) support in CryptoPkg

[Prarthana Sagar V]

[-- Attachment #1: Type: text/plain, Size: 294 bytes --]

Hello,

CryptoPkg has no support to send SNI extension in ClientHello during Handshake.
When multiple URLs are used in single server, then it is necessary to send host name as SNI in ClientHello to make the handshake successful.
Does EDK2 have any plan to support it?

Thanks
Prarthana

[-- Attachment #2: Type: text/html, Size: 2752 bytes --]

Re: [edk2-devel] Server name Indication (SNI) support in CryptoPkg

[Laszlo Ersek]

On 10/07/20 14:13, Prarthana Sagar V wrote:
> Hello,
> 
> CryptoPkg has no support to send SNI extension in ClientHello during Handshake.
> When multiple URLs are used in single server, then it is necessary to send host name as SNI in ClientHello to make the handshake successful.
> Does EDK2 have any plan to support it?

CC'ing NetworkPkg and CryptoPkg owners.

Thanks
Laszlo

Re: [edk2-devel] Server name Indication (SNI) support in CryptoPkg

[Yao, Jiewen]

I do not know if cryptopkg has such plan.

You may file a Bugzilla to record this request.

Thank you
Yao Jiewen

> -----Original Message-----
> From: Laszlo Ersek <lersek@redhat.com>
> Sent: Thursday, October 8, 2020 12:11 AM
> To: devel@edk2.groups.io; prarthanasv@amiindia.co.in
> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>; Wu, Jiaxin
> <jiaxin.wu@intel.com>; Fu, Siyuan <siyuan.fu@intel.com>; Yao, Jiewen
> <jiewen.yao@intel.com>; Wang, Jian J <jian.j.wang@intel.com>; Lu, XiaoyuX
> <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>
> Subject: Re: [edk2-devel] Server name Indication (SNI) support in CryptoPkg
> 
> On 10/07/20 14:13, Prarthana Sagar V wrote:
> > Hello,
> >
> > CryptoPkg has no support to send SNI extension in ClientHello during
> Handshake.
> > When multiple URLs are used in single server, then it is necessary to send host
> name as SNI in ClientHello to make the handshake successful.
> > Does EDK2 have any plan to support it?
> 
> CC'ing NetworkPkg and CryptoPkg owners.
> 
> Thanks
> Laszlo

Re: [edk2-devel] Server name Indication (SNI) support in CryptoPkg

[Prarthana Sagar V]

I have already raised this request in Bugzilla and they mentioned to mail to devel group.
https://bugzilla.tianocore.org/show_bug.cgi?id=2953

Thanks
Prarthana


-----Original Message-----
From: Yao, Jiewen [mailto:jiewen.yao@intel.com] 
Sent: 08 October 2020 05:54
To: Laszlo Ersek <lersek@redhat.com>; devel@edk2.groups.io; Prarthana Sagar V <prarthanasv@amiindia.co.in>
Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>; Wu, Jiaxin <jiaxin.wu@intel.com>; Fu, Siyuan <siyuan.fu@intel.com>; Wang, Jian J <jian.j.wang@intel.com>; Lu, XiaoyuX <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>
Subject: RE: [edk2-devel] Server name Indication (SNI) support in CryptoPkg

I do not know if cryptopkg has such plan.

You may file a Bugzilla to record this request.

Thank you
Yao Jiewen

> -----Original Message-----
> From: Laszlo Ersek <lersek@redhat.com>
> Sent: Thursday, October 8, 2020 12:11 AM
> To: devel@edk2.groups.io; prarthanasv@amiindia.co.in
> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>; Wu, Jiaxin 
> <jiaxin.wu@intel.com>; Fu, Siyuan <siyuan.fu@intel.com>; Yao, Jiewen 
> <jiewen.yao@intel.com>; Wang, Jian J <jian.j.wang@intel.com>; Lu, 
> XiaoyuX <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>
> Subject: Re: [edk2-devel] Server name Indication (SNI) support in 
> CryptoPkg
> 
> On 10/07/20 14:13, Prarthana Sagar V wrote:
> > Hello,
> >
> > CryptoPkg has no support to send SNI extension in ClientHello during
> Handshake.
> > When multiple URLs are used in single server, then it is necessary 
> > to send host
> name as SNI in ClientHello to make the handshake successful.
> > Does EDK2 have any plan to support it?
> 
> CC'ing NetworkPkg and CryptoPkg owners.
> 
> Thanks
> Laszlo

Re: [edk2-devel] Server name Indication (SNI) support in CryptoPkg

[Laszlo Ersek]

On 10/08/20 15:04, Prarthana Sagar V wrote:
> I have already raised this request in Bugzilla and they mentioned to mail to devel group.
> https://bugzilla.tianocore.org/show_bug.cgi?id=2953

Sorry about that.

Then it seems nobody has currently an interest in implementing this
feature. The BZ is a good place to keep it on the record. Of course the
existence of a BZ still doesn't guarantee that the feature will be
implemented.

You could research the feature and attempt to contribute it, as well.

Thanks
Laszlo


> -----Original Message-----
> From: Yao, Jiewen [mailto:jiewen.yao@intel.com] 
> Sent: 08 October 2020 05:54
> To: Laszlo Ersek <lersek@redhat.com>; devel@edk2.groups.io; Prarthana Sagar V <prarthanasv@amiindia.co.in>
> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>; Wu, Jiaxin <jiaxin.wu@intel.com>; Fu, Siyuan <siyuan.fu@intel.com>; Wang, Jian J <jian.j.wang@intel.com>; Lu, XiaoyuX <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>
> Subject: RE: [edk2-devel] Server name Indication (SNI) support in CryptoPkg
> 
> I do not know if cryptopkg has such plan.
> 
> You may file a Bugzilla to record this request.
> 
> Thank you
> Yao Jiewen
> 
>> -----Original Message-----
>> From: Laszlo Ersek <lersek@redhat.com>
>> Sent: Thursday, October 8, 2020 12:11 AM
>> To: devel@edk2.groups.io; prarthanasv@amiindia.co.in
>> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>; Wu, Jiaxin 
>> <jiaxin.wu@intel.com>; Fu, Siyuan <siyuan.fu@intel.com>; Yao, Jiewen 
>> <jiewen.yao@intel.com>; Wang, Jian J <jian.j.wang@intel.com>; Lu, 
>> XiaoyuX <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>
>> Subject: Re: [edk2-devel] Server name Indication (SNI) support in 
>> CryptoPkg
>>
>> On 10/07/20 14:13, Prarthana Sagar V wrote:
>>> Hello,
>>>
>>> CryptoPkg has no support to send SNI extension in ClientHello during
>> Handshake.
>>> When multiple URLs are used in single server, then it is necessary 
>>> to send host
>> name as SNI in ClientHello to make the handshake successful.
>>> Does EDK2 have any plan to support it?
>>
>> CC'ing NetworkPkg and CryptoPkg owners.
>>
>> Thanks
>> Laszlo
>