serf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Osipov (JIRA)" <>
Subject [jira] [Created] (SERF-185) serf_get sets incorrect hostname for SNI
Date Fri, 29 Sep 2017 11:25:00 GMT
Michael Osipov created SERF-185:

             Summary: serf_get sets incorrect hostname for SNI
                 Key: SERF-185
             Project: serf
          Issue Type: Bug
    Affects Versions: serf-1.3.9
         Environment: * IP.
* Hostname (A record):
* Hostname (CNAME): =>
* Tomcat 8.5 with APR/OpenSSL TLS Virtual Hosting
* Default host:
            Reporter: Michael Osipov

When issues following request with {{./serf_get -H -m GET}}
the {{server_name}} value in the SNI extension is {{}}, but has
to be {{}} (stripped port). Tomcat is not able to match the input against
its confguration and delivers the wrong certificate.

The error is in:

./test/serf_get.c:226:        serf_ssl_set_hostname(conn_ctx->ssl_ctx, ctx->hostinfo);

where {{hostinfo}} contains hostname and port which is suitable for the {{Host}} header, but
not for SNI.

Subversion itself does not suffer from this issue.

This message was sent by Atlassian JIRA

View raw message