[ https://issues.apache.org/jira/browse/HTTPCLIENT-1119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13579160#comment-13579160 ]
Oleg Kalnichevski commented on HTTPCLIENT-1119: ----------------------------------------------- Josef, There is _nothing_ that prevents you from using a custom HostnameVerifier that makes use of SNI extensions when running on Java 7. It probably takes just 1 line of code instead of several dozens when the same call is used reflectively. Oleg > Server Name Indication (SNI) Support > ------------------------------------ > > Key: HTTPCLIENT-1119 > URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1119 > Project: HttpComponents HttpClient > Issue Type: Improvement > Components: HttpClient > Reporter: Gus Power > Labels: sni, ssl, tls, vhost > Fix For: Future > > Attachments: > HTTPCLIENT-1119-support-SNI-on-Java-7-via-setHost-of.patch > > > Provide support for Server Name Indication (SNI) support as per RFC 3546 > (section 3.1). > Currently attempting to connect to SNI enabled host 'expectedhost' over SSL > using http client results in an SSLException similar to: > javax.net.ssl.SSLException: hostname in certificate didn't match: > <expectedhost> != <defaulthost> > at > org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:220) > We use SNI on some of our environments and were trying to use httpclient to > automatically test host access and availability. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org For additional commands, e-mail: dev-h...@hc.apache.org