Re: openssl sends alert to a ServerHello that contains empty server_name

2014-11-08 Thread Florian Weimer
* Bogdan Harjoc: > Attached is the pcap. Am I missing something ? RFC 6066 says this: A server that receives a client hello containing the "server_name" extension MAY use the information contained in the extension to guide its selection of an appropriate certificate to return to the cli

Re: openssl sends alert to a ServerHello that contains empty server_name

2014-10-26 Thread Bogdan Harjoc
It does seem other webservers send the server_name back with 0 as the length of extension_data. And the site in question seems to be running an old (6.1.26) jetty version. End of story, I guess. Thanks. On Fri, Oct 24, 2014 at 7:11 PM, Emilia Käsper wrote: > The server is sending back a servern

Re: openssl sends alert to a ServerHello that contains empty server_name

2014-10-24 Thread Viktor Dukhovni
On Fri, Oct 24, 2014 at 06:11:42PM +0200, Emilia K?sper wrote: > The server is sending back a servername extension where the extension_data > has length 2, and the data consists of two 0-bytes. An empty extension, as > required by the RFC, would have length 0, and empty data. That'd mean the > pro

Re: openssl sends alert to a ServerHello that contains empty server_name

2014-10-24 Thread Emilia Käsper
The server is sending back a servername extension where the extension_data has length 2, and the data consists of two 0-bytes. An empty extension, as required by the RFC, would have length 0, and empty data. That'd mean the problem is on their end, I think. Cheers, Emilia On Fri, Oct 24, 2014 at