Path: csiph.com!aioe.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=c3=b8j?= <arne@vajhoej.dk>
Newsgroups: comp.lang.java.programmer
Subject: Re: Server Name Indication
Date: Wed, 24 Aug 2016 22:28:21 -0400
Organization: Aioe.org NNTP Server
Lines: 27
Message-ID: <npll44$1mn3$1@gioia.aioe.org>
References: <cl9rrbdl45uuh31ukp3a3l50ekgu45bvlb@4ax.com>
NNTP-Posting-Host: 7SK6yTFfqwlIPNBLl3l7Qg.user.gioia.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: abuse@aioe.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
X-Notice: Filtered by postfilter v. 0.8.2
Xref: csiph.com comp.lang.java.programmer:35448

On 8/24/2016 9:59 AM, Roedy Green wrote:
> In Java, I have found that I must
>
>  System.setProperty( "jsse.enableSNIExtension", "false" );
>
> true or false must match
> https://sslanalyzer.comodoca.com/?url=www.xxx.com
>
> Something is rotten.
>
> 1. the property is static. If you have multithreads, you can't have
> the property set correctly for all threads. (I kludge by doing
> batches).  The property should be method of the connection.
>
> 2. Non-java program work fine with either type of site.  Whatever they
> are doing Java should do too.

Obviously this is not very well implemented in the Java library.

But are you sure that you really need to set that?

I would expect practically all web sites to work without it being
specified.

Arne