[bop-devel] BOP needs the server name SNI

Doug Juhlin doug at donor.com
Mon Sep 12 10:22:30 PDT 2022


Ivan, we're using several Business::OnlinePayment modules and suddenly had
a new problem. One vendor (WorldPay at secure.worldpay.com) seems to be
requiring that the SNI be passed along. But the BOP modules call
Net::SSLeay->get_https() which does not include the SNI. We found this
quote:

https://stackoverflow.com/questions/67537126/perl-netssleay-and-server-name-indications
*get_https3 like many similar functions ultimately ends up in https_cat
where the SSL context setup and the SSL handshake are done. Unfortunately,
setting the server_name extension (SNI) is not done in this really old part
of the code, which comes from a time where SNI wasn't that essentially for
using HTTPS as it is today.*


Have you heard of this problem? Any suggestions?

Do you know of any other functions like get_https() which handle the
detailed SSL handshaking and include the SNI?






-- 
Doug Juhlin
doug at donor.com


More information about the bop-devel mailing list