[QPID-8535] [Broker-J] Add a switch to ignore SNI host errors

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: qpid-java-broker-8.0.3
• Fix Version/s: qpid-java-broker-8.0.5
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Dedeepya
• Created: 02/Jun/21 10:44
• Updated: 19/Jun/21 18:02
• Resolved: 13/Jun/21 21:23

Description

While qpid proton client connects using TLS to broker, it sets the virtual host name as SNI in the header during the SSL handshake. When VH name contains an underscore, broker fails to create SNI name as it considers underscore as an invalid character, as a result SSL handshake failure occurs.

Adding a switch to bypass SNIhostname errors and proceed with SSL handshake would allow the client to continue broker with SSL handshake even when SNI is incorrect