Return-Path: 
 <dev-return-27400-apmail-hc-dev-archive=hc.apache.org@hc.apache.org>
X-Original-To: apmail-hc-dev-archive@www.apache.org
Delivered-To: apmail-hc-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 51443E1E9
	for <apmail-hc-dev-archive@www.apache.org>;
 Tue, 19 Feb 2013 10:13:17 +0000 (UTC)
Received: (qmail 97950 invoked by uid 500); 19 Feb 2013 10:13:16 -0000
Delivered-To: apmail-hc-dev-archive@hc.apache.org
Received: (qmail 97398 invoked by uid 500); 19 Feb 2013 10:13:15 -0000
Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@hc.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@hc.apache.org>
List-Post: <mailto:dev@hc.apache.org>
List-Id: <dev.hc.apache.org>
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Delivered-To: mailing list dev@hc.apache.org
Received: (qmail 97303 invoked by uid 99); 19 Feb 2013 10:13:13 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 19 Feb 2013 10:13:13 +0000
Date: Tue, 19 Feb 2013 10:13:13 +0000 (UTC)
From: "Graham Leggett (JIRA)" <jira@apache.org>
To: dev@hc.apache.org
Message-ID: <JIRA.12519958.1314188312894.304407.1361268793851@arcas>
In-Reply-To: <JIRA.12519958.1314188312894@arcas>
References: <JIRA.12519958.1314188312894@arcas>
Subject: [jira] [Commented] (HTTPCLIENT-1119) Server Name Indication (SNI)
 Support
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/HTTPCLIENT-1119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13581182#comment-13581182 ] 

Graham Leggett commented on HTTPCLIENT-1119:
--------------------------------------------

SNI is a non backwards compatible Java 7 feature, and like other new features before it you can either a) use reflection to determine at runtime whether the feature exists or not before trying to use it, or b) produce dedicated binaries for Java 7.

It is becoming more and more difficult to justify the use of multiple IP addresses on a single box, and in turn, it becomes more and more difficult to justify the continued use of code like httpclient that doesn't support SNI.

                
> Server Name Indication (SNI) Support
> ------------------------------------
>
>                 Key: HTTPCLIENT-1119
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1119
>             Project: HttpComponents HttpClient
>          Issue Type: Improvement
>          Components: HttpClient
>            Reporter: Gus Power
>              Labels: sni, ssl, tls, vhost
>             Fix For: Future
>
>         Attachments: HTTPCLIENT-1119-support-SNI-on-Java-7-via-setHost-of.patch
>
>
> Provide support for Server Name Indication (SNI) support as per RFC 3546 (section 3.1).
> Currently attempting to connect to SNI enabled host 'expectedhost' over SSL using http client results in an SSLException similar to:
> javax.net.ssl.SSLException: hostname in certificate didn't match: <expectedhost> != <defaulthost>
>   at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:220)
> We use SNI on some of our environments and were trying to use httpclient to automatically test host access and availability.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org