implicit derivation of hostname for SNI should be less astonishing

[noxxi]

implicit derivation of hostname for SNI should be less astonishing

[jcflack]

I've reported closely-related issue csirtgadgets/LWPx-ParanoidAgent#14 (it breaks because it passes PeerHost to this module expecting it to work).

Naturally, the problem interaction could be fixed either by having that module pass SSL_hostname explicitly, or having this module not ignore PeerHost. I've opened issues both places because I think both changes would make sense.

[noxxi]

IO::Socket::SSL uses IO::Socket::INET, IO::Socket::INET6 or IO::Socket::IP as the backend and unfortunately these modules differ slightly in the use of these keys:

• INET and INET6 claim that PeerHost is just a synonym for PeerAddr and will set PeerAddr from PeerHost only if PeerAddr is not defined.
• IP claims instead that PeerAddr is a synonym for PeerHost and will set PeerHost from PeerAddr only if PeerHost is not defined. Thus it behaves different to the others.

But, both say that PeerAddr and PeerHost are just a different name for the same thing and both ignore if you give different settings to both values (but they ignore it in a different way).

Internally INET and INET6 leave PeerHost in args, even after they've used it to set PeerAddr. IP instead removes PeerAddr if it got used to set PeerHost. In essence it should not matter if one uses PeerAddr||PeerHost or PeerHost||PeerAddr because these keys should be either the same (because they are synonyms) or one of them should be empty. But if the keys are set to different values the behavior depends on the underlying module.

In essence the only sane behavior would be to croak if both keys are set and are different.

There are some places in IO::Socket::SSL which currently only use PeerAddr. These places need to be fixed to use PeerAddr||PeerHost to work together with IO::Socket::IP too.

[noxxi]

There are some places in IO::Socket::SSL which currently only use PeerAddr. These places need to be fixed to use PeerAddr||PeerHost to work together with IO::Socket::IP too.

This was fixed in 68b1ba1, additionally to also accepting PeerService (used by IO::Socket::IP) instead of PeerPort. Also it was documented that PeerHost and PeerAddr are considered synonyms and thus should never be set both or at least not to different values.