https://bz.apache.org/bugzilla/show_bug.cgi?id=57830

--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> ---
+1 to adding this enhancement.

Without this feature, AWS ELB won't send anything about an ELB-terminated TLS
connection through to the server except for the protocol (e.g. TLSv1) and the
remote client's IP address. That means you can't do client certificates,
further-validate cipher strength, etc.

As for the difference between the recently-added SNI code, is it not possible
to read a block of data and then discard some of it (after taking-out the
relevant data, of course) before passing it down the chain to the SSL handshake
processor?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to