-
Enhancement
-
Resolution: Fixed
-
P2
-
7
-
b118
-
generic
-
generic
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8155167 | 6u131 | Sean Coffey | P2 | Resolved | Fixed | b01 |
JDK-8154768 | 6u115 | Sean Coffey | P2 | Closed | Fixed | b32 |
In practice, many virtual servers may host at the same IP address, and listening at the same port. Because SSL/TLS is an transport layer protocol, there was no way to indicate the server hostname and then could not provide SSL/TLS connections between those virtual servers and their clients.
We have got many requests to support SNI extension, and a lot of Java applications cannot visit virtual SSL/TLS servers listening on the same IP address and port. Virtual hosts are widespread and we need to address the problem as soon as possible.
RFC4366 defines Server Name Indication (SNI) extension to support virtual servers.
RFC4366:
TLS does not provide a mechanism for a client to tell a server the
name of the server it is contacting. It may be desirable for clients
to provide this information to facilitate secure connections to
servers that host multiple 'virtual' servers at a single underlying
network address.
In order to provide the server name, clients MAY include an extension
of type "server_name" in the (extended) client hello.
We have got many requests to support SNI extension, and a lot of Java applications cannot visit virtual SSL/TLS servers listening on the same IP address and port. Virtual hosts are widespread and we need to address the problem as soon as possible.
RFC4366 defines Server Name Indication (SNI) extension to support virtual servers.
RFC4366:
TLS does not provide a mechanism for a client to tell a server the
name of the server it is contacting. It may be desirable for clients
to provide this information to facilitate secure connections to
servers that host multiple 'virtual' servers at a single underlying
network address.
In order to provide the server name, clients MAY include an extension
of type "server_name" in the (extended) client hello.
- backported by
-
JDK-8155167 To support Server Name Indication extension for JSSE client
- Resolved
-
JDK-8154768 To support Server Name Indication extension for JSSE client
- Closed