changeset 460:dbe249968591

fetch_feeds: Add support for SNI in TLS and make note about requiring tcl-tls 1.7.13+
author Matti Hamalainen <ccr@tnsp.org>
date Mon, 30 Oct 2017 15:46:50 +0200
parents 6acd372d36da
children 721a56cd62e3
files fetch_feeds.tcl
diffstat 1 files changed, 4 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/fetch_feeds.tcl	Sat Oct 21 00:59:06 2017 +0300
+++ b/fetch_feeds.tcl	Mon Oct 30 15:46:50 2017 +0200
@@ -9,6 +9,9 @@
 #
 # This script is freely distributable under GNU GPL (version 2) license.
 #
+# NOTICE! NOTICE! This script REQUIRES tcl-tls 1.7.13+ if you wish to
+# support SSL/TLS https for URL checking. And you probably do.
+#
 ##############################################################################
 
 ### The configuration should be in config.feeds in same directory
@@ -37,7 +40,7 @@
 
 if {[info exists http_tls_support] && $http_tls_support != 0} {
   package require tls
-  ::http::register https 443 [list ::tls::socket -request 1 -require 1 -tls1 1 -cadir $http_tls_cadir]
+  ::http::register https 443 [list ::tls::socket -request true -require true -ssl2 false -ssl3 false -tls1 true -tls1.1 true -tls1.2 true -cadir $http_tls_cadir -autoservername true]
 }