Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #34874 > unrolled thread
| Started by | Roedy Green <inquiry@mindprod.com> |
|---|---|
| First post | 2016-07-12 20:57 -0700 |
| Last post | 2016-07-14 22:18 -0400 |
| Articles | 3 — 3 participants |
Back to article view | Back to comp.lang.java.programmer
enableSNIExtension Roedy Green <inquiry@mindprod.com> - 2016-07-12 20:57 -0700
Re: enableSNIExtension Silvio <silvio@internet.com> - 2016-07-14 00:48 +0200
Re: enableSNIExtension Arne Vajhøj <arne@vajhoej.dk> - 2016-07-14 22:18 -0400
| From | Roedy Green <inquiry@mindprod.com> |
|---|---|
| Date | 2016-07-12 20:57 -0700 |
| Subject | enableSNIExtension |
| Message-ID | <9pebobhdrt11bm3nebh31hcm3s30oo18t4@4ax.com> |
System.setProperty( "jsse.enableSNIExtension", "false" ); Oracle erred in making this a system property. It is something you configure on a site by site basis. This really should be a method of HttpURLConnection. Consider what happen when you have many threads each reading from SSL sites. The only thing I can think of to bypass this error is to bundle the sites that use SNI and do not, and process them in two separate lumps. Surely there is some way to probe a site to see if it uses SNI. If so, this system property could be deprecated.
[toc] | [next] | [standalone]
| From | Silvio <silvio@internet.com> |
|---|---|
| Date | 2016-07-14 00:48 +0200 |
| Message-ID | <5786c530$0$4027$e4fe514c@newszilla.xs4all.nl> |
| In reply to | #34874 |
On 07/13/2016 05:57 AM, Roedy Green wrote: > System.setProperty( "jsse.enableSNIExtension", "false" ); > > Oracle erred in making this a system property. > > It is something you configure on a site by site basis. This really > should be a method of HttpURLConnection. > > Consider what happen when you have many threads each reading from SSL > sites. > > The only thing I can think of to bypass this error is to bundle the > sites that use SNI and do not, and process them in two separate lumps. > > Surely there is some way to probe a site to see if it uses SNI. If > so, this system property could be deprecated. > Why would you want to disable SNI?
[toc] | [prev] | [next] | [standalone]
| From | Arne Vajhøj <arne@vajhoej.dk> |
|---|---|
| Date | 2016-07-14 22:18 -0400 |
| Message-ID | <nm9h5u$1ccc$1@gioia.aioe.org> |
| In reply to | #34874 |
On 7/12/2016 11:57 PM, Roedy Green wrote: > System.setProperty( "jsse.enableSNIExtension", "false" ); > > Oracle erred in making this a system property. > > It is something you configure on a site by site basis. This really > should be a method of HttpURLConnection. > > Consider what happen when you have many threads each reading from SSL > sites. > > The only thing I can think of to bypass this error is to bundle the > sites that use SNI and do not, and process them in two separate lumps. > > Surely there is some way to probe a site to see if it uses SNI. If > so, this system property could be deprecated. Most sites should support it by now, so maybe you can just run with default (true). I believe that many think that Java should just ignore the server response from non-SNI servers when enabled, because then there would never be a reason to disable it. But if you have a case where you have both SNI servers and non-SNI servers, then 2 JVM's seems like the easy solution. The hard solution must be to play around with SSLSocketFactory and SSLSocket and do some magic to make it a per connection thing. I have not tried that. Arne
[toc] | [prev] | [standalone]
Back to top | Article view | comp.lang.java.programmer
csiph-web