Does apache and openssl in 14.1 support SNI?

avian · 09-09-2017, 01:28 PM

Before I spend more time trying to trouble shoot a problem I'm having, just thought I would ask if the latest available openssl on slackware 14.1 (1.0.1u) and httpd (2.4.17) are compiled with support for SNI (Server Name Indication)?

Apparently openssl (>0.9.8k) by default should have enable-tlsext set, and I presume relevant defaults apache/mod_ssl allow it, but I'm racking my brain getting it working, so want to make sure I'm not chasing my tail. Any help would be appreciated.

Richard Cranium · 09-09-2017, 04:28 PM

I don't know, but you could install Wireshark from Slackbuilds, attempt to connect, and sniff the TLS handshake.

I've done that at work to prove that our java libraries supported SNI. (EDIT: Albeit that was on a Mac, but I would have done the same on a linux box as well.)

avian · 09-11-2017, 10:48 AM

Thanks for the suggestion, I'll keep WireShark in my utility belt.

Anyway ends up slack14.1 supports SNI fine (incase anyone searches for it in the future). Just mustve been something in my old configuration files that stopped it working.