google / google/conscrypt

SNI - handle two or more cert in keystore

Open
#644 9 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
1.4k
Forks
326
Avg merge
16h 22m
Merged PRs (30d)
17

Description

Conscrypt can't handle SNI. Tested with Jetty 9.4.x + Conscrypt 2.0.0. (Signle Jetty can handle it)
```
2019-03-25 13:03:21.364:INFO::Thread-0: Logging initialized @1677ms to org.eclipse.jetty.util.log.StdErrLog
2019-03-25 13:03:21.709:INFO:oejs.Server:Thread-0: jetty-9.4.15.v20190215; built: 2019-02-15T16:53:49.381Z; git: eb70b240169fcf1abbd86af36482d1c49826fa0b; jvm 11.0.2+9
2019-03-25 13:03:21.771:INFO:oejsh.ContextHandler:Thread-0: Started o.e.j.s.h.ContextHandler@1b43fc78{/stop,null,AVAILABLE,127.0.0.1}
2019-03-25 13:03:21.772:INFO:oejsh.ContextHandler:Thread-0: Started o.e.j.s.h.ContextHandler@11e40211{/other,null,AVAILABLE}
2019-03-25 13:03:21.802:INFO:oejus.SslContextFactory:Thread-0: x509=X509@516382a4(server1,h=[alt1.name.tld, cn1.name.tld],w=[]) for SslContextFactory@1100634b[provider=Conscrypt,keyStore=null,trustStore=null]
2019-03-25 13:03:21.803:INFO:oejus.SslContextFactory:Thread-0: x509=X509@16ba7b8e(server2,h=[alt2.name.tld, cn2.name.tld],w=[]) for SslContextFactory@1100634b[provider=Conscrypt,keyStore=null,trustStore=null]
2019-03-25 13:03:21.978:INFO:oejs.AbstractConnector:Thread-0: Started ServerConnector@15925715{SSL,[ssl, alpn, h2, http/1.1]}{0.0.0.0:50443}
2019-03-25 13:03:21.979:INFO:oejs.Server:Thread-0: Started @2292ms

Client: No subject alternative DNS name matching alt1.name.tld found.java.io.IOException: No subject alternative DNS name matching alt1.name.tld found.
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.