[HTTPCLIENT-1119] Server Name Indication (SNI) Support

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.3.2
• Component/s: HttpClient (classic)
• Labels: sni ssl tls vhost
• Assignee: Unassigned
• Reporter: Gus Power
• Created: 24/Aug/11 12:18
• Updated: 04/May/17 09:48
• Resolved: 23/Nov/13 11:11

Description

Provide support for Server Name Indication (SNI) support as per RFC 3546 (section 3.1).

Currently attempting to connect to SNI enabled host 'expectedhost' over SSL using http client results in an SSLException similar to:

javax.net.ssl.SSLException: hostname in certificate didn't match: <expectedhost> != <defaulthost>
at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:220)

We use SNI on some of our environments and were trying to use httpclient to automatically test host access and availability.