Was trying to see why openssl doesn't like to connect to
elink-http8.bankofamerica.com.

Seems it sends an alert (fatal) "Unrecognized name" because the server
sends back an empty server_name extension, rightly so according to rfc
6066.

Reproduce using (1.0.1j):

openssl s_client -connect elink-http8.bankofamerica.com:443
-servername elink-http8.bankofamerica.com

I tried this on android with chrome and the standard browser since
they use openssl and it triggers an error. On an iphone the ssl site
loads.

Attached is the pcap. Am I missing something ?

Attachment: openssl-serverhello-servername-alert.pcap
Description: Binary data

Reply via email to