# HG changeset patch
# User Matti Hamalainen <ccr@tnsp.org>
# Date 1509371210 -7200
# Node ID dbe2499685919aa0d5698de743ccc90ed0ecbad0
# Parent  6acd372d36da67cae789d62bacaa4a3ea952a8f8
fetch_feeds: Add support for SNI in TLS and make note about requiring tcl-tls 1.7.13+

diff -r 6acd372d36da -r dbe249968591 fetch_feeds.tcl
--- a/fetch_feeds.tcl	Sat Oct 21 00:59:06 2017 +0300
+++ b/fetch_feeds.tcl	Mon Oct 30 15:46:50 2017 +0200
@@ -9,6 +9,9 @@
 #
 # This script is freely distributable under GNU GPL (version 2) license.
 #
+# NOTICE! NOTICE! This script REQUIRES tcl-tls 1.7.13+ if you wish to
+# support SSL/TLS https for URL checking. And you probably do.
+#
 ##############################################################################
 
 ### The configuration should be in config.feeds in same directory
@@ -37,7 +40,7 @@
 
 if {[info exists http_tls_support] && $http_tls_support != 0} {
   package require tls
-  ::http::register https 443 [list ::tls::socket -request 1 -require 1 -tls1 1 -cadir $http_tls_cadir]
+  ::http::register https 443 [list ::tls::socket -request true -require true -ssl2 false -ssl3 false -tls1 true -tls1.1 true -tls1.2 true -cadir $http_tls_cadir -autoservername true]
 }