sni

Server Name Indication support in Net::HTTP?

生来就可爱ヽ(ⅴ<●) 提交于 2019-12-05 21:46:03
问题 I'm trying to get Ruby's Net::HTTP implementation to work with SNI. Both mail.google.com and gmail.com live on the same IP address, so when connecting via SSL, the Google server needs to know which certificate to use. By default, it returns the mail.google.com certificate, which is a problem if you're trying to implement WebFinger. WebFinger requires you to retrieve https://gmail.com/.well-known/host-meta to get the LRDD information, however, for security reasons, it's critical to verify the

IE on XP does not support SNI to permit multiple certificates for single server

北城余情 提交于 2019-12-04 13:53:59
问题 I've been searching for a few hours to find a solution to my question/problem and whilst I believe that I have been able to clarify the reason why I have problems I have been unable to find a resolution. I have one server which is hosting multiple web sites and a couple of these web sites are using SSL certificates. I have some shared images accessed by all sites and the way to stop the none-secure error on the SSL site was to serve those shared images from https://www.example-shared-image

What is the most efficient code to detect and redirect SNI supported browsers?

不打扰是莪最后的温柔 提交于 2019-12-04 05:08:43
Say, I have a website mywebsite.com , hosted using Apache Httpd. Now what I want is that whenever any user types mywebsite.com or www.mywebsite.com and if the browser supports SNI then it should redirect to https://www.mywebsite.com else redirect to http://www.mywebsite.com . So, what is the most efficient way to achieve it ? The below code should work Options -Indexes +FollowSymLinks RewriteEngine on RewriteCond %{HTTP_HOST} ^mywebsite.com$ RewriteCond %{HTTPS} (on|off) RewriteRule ^(.*)$ http://www.mywebsite.com/$1 [R=302,L] RewriteCond %{HTTPS} off RewriteCond %{HTTP_USER_AGENT} !MSIE\s6

Programmatically add binding on IIS 8 with SNI option

我与影子孤独终老i 提交于 2019-12-04 03:56:51
问题 I'm trying to create bindings for IIS 8 that have the flag SNI checked (Server Name Indication) using Microsoft.Web.Administration library (.NET Framework). This is necessary to me because I want to get multiple SSL bindings for the same website under IIS, all using just one IP address. This is one of the main new features of IIS 8. I've been looking into the Binding class and I can't find any flag or option to indicate it. Is it possible with current Microsoft.Web.Administration v 7.0.0.0?

OpenSSL::SSL::SSLContext SNI servername_cb Not Working

主宰稳场 提交于 2019-12-04 03:55:04
问题 As referenced in OpenSSL::X509::Certificate Showing Certificate for Wrong Domain, I need to use TLSv1 or above and Server Name Indication extension. Even with ssl_version and servername_cb set via the SSLContext , I'm still getting the wrong certificate for myproair.com . begin timeout(1) do tcp_client = TCPSocket.new("#{instance["domain"]}", 443) ssl_context = OpenSSL::SSL::SSLContext.new() ssl_context.ssl_version = :TLSv1 ssl_context.servername_cb = "https://#{instance["domain"]}" ssl

Server Name Indication support in Net::HTTP?

萝らか妹 提交于 2019-12-04 03:33:04
I'm trying to get Ruby's Net::HTTP implementation to work with SNI. Both mail.google.com and gmail.com live on the same IP address, so when connecting via SSL, the Google server needs to know which certificate to use. By default, it returns the mail.google.com certificate, which is a problem if you're trying to implement WebFinger. WebFinger requires you to retrieve https://gmail.com/.well-known/host-meta to get the LRDD information, however, for security reasons, it's critical to verify the SSL certificate information. Since Google serves up the default mail.google.com certificate in this

.NET SNI support

若如初见. 提交于 2019-12-02 13:40:07
问题 I have a Web Service (asmx) API that was written in .NET 3.5 by another developer that I manage. We recently moved from Server 2008R2 to Server 2012R2 and I decided to use SNI instead of having an IP for each certificate. Well it turns out that one of our API users was no longer able to connect to our API after the switch to SNI. I found out that they use Server 2003 which I figured was the reason for it no longer working. I went ahead and assigned the site a public ip which fixed the problem

Programmatically add binding on IIS 8 with SNI option

笑着哭i 提交于 2019-12-01 19:58:55
I'm trying to create bindings for IIS 8 that have the flag SNI checked (Server Name Indication) using Microsoft.Web.Administration library (.NET Framework). This is necessary to me because I want to get multiple SSL bindings for the same website under IIS, all using just one IP address. This is one of the main new features of IIS 8. I've been looking into the Binding class and I can't find any flag or option to indicate it. Is it possible with current Microsoft.Web.Administration v 7.0.0.0? Will I need a new version that I haven't found? I know that version 7.9.0.0 is only for IIS express, and

Server closes connections made using httpclient and Java 7

房东的猫 提交于 2019-12-01 10:03:55
问题 I am trying to connect to a remote server that serves certificates using SNI. I noticed that the server is closing connections made when I compile and run code using Java 7 and not when I compile and run it via Java 8. Below is the code that i made to test this assumption. I switch Java versions and run the code and get different results. public static void getRequest() throws IOException, NoSuchAlgorithmException, KeyManagementException { String url = "https://sorry i can not share the exact

Setting up TLS1.2 connection which supports SNI

不想你离开。 提交于 2019-12-01 05:31:12
问题 We are trying to setup TLS1.2 connection. Have downloaded the latest OpenSSL in the Macbook. Using this code to create the TLS1.2 connection. However this particular line is possibly causing the issue. It uses TLSv1. /* ---------------------------------------------------------- * * Set SSLv2 client hello, also announce SSLv3 and TLSv1 * * ---------------------------------------------------------- */ method = SSLv23_client_method(); Tried TLSv1_2_client_method() method, but it gives below