Path: csiph.com!aioe.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=c3=b8j?= <arne@vajhoej.dk>
Newsgroups: comp.lang.java.programmer
Subject: Re: SSL anomalies
Date: Tue, 12 Jul 2016 22:11:34 -0400
Organization: Aioe.org NNTP Server
Lines: 21
Message-ID: <nm480l$1r2p$1@gioia.aioe.org>
References: <pi1nnblbhka12mc73meto1mn7jqqigs31u@4ax.com> <nlho7o$a4s$1@gioia.aioe.org> <7v0aob9prkasgc9aq63nv83nnhc0a8b9v8@4ax.com>
NNTP-Posting-Host: 7SK6yTFfqwlIPNBLl3l7Qg.user.gioia.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Complaints-To: abuse@aioe.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
X-Notice: Filtered by postfilter v. 0.8.2
Xref: csiph.com comp.lang.java.programmer:34873

On 7/12/2016 11:02 AM, Roedy Green wrote:
> On Tue, 5 Jul 2016 21:51:52 -0400, Arne Vajhøj <arne@vajhoej.dk>
> wrote:
>> All the above works perfect with latest Java 8 except https://handbrake.fr
>> that throws an exception due to some certificate error.
>
> I discovered that  this seems to be the crucial difference.
>
>  // If you set this false, and the site supports SNI, you will not be
> able to connect.
> // You have to try it both ways or keep track on a site by site basis
>  // System.setProperty( "jsse.enableSNIExtension", "false" );
>
> to be determined if it explains everything.

To me this is a text book example of something not to set
by default and only set for a specific case when deemed
absolutely necessary.

Arne