Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes #6624 - Non-domain SNI on java17 #6640

Merged
merged 1 commit into from Aug 19, 2021

Conversation

sbordet
Copy link
Contributor

@sbordet sbordet commented Aug 18, 2021

Forward port of #6634.

Java 17 only allows letter|digit|hyphen characters for SNI names.

While we could bypass this restriction on the client, when the SNI bytes arrive to the server they will be verified and if not allowed the TLS handshake will fail.

Signed-off-by: Simone Bordet simone.bordet@gmail.com
(cherry picked from commit 693663a)

Java 17 only allows letter|digit|hyphen characters for SNI names.

While we could bypass this restriction on the client, when the SNI bytes arrive to the server they will be verified and if not allowed the TLS handshake will fail.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
(cherry picked from commit 693663a)
@sbordet sbordet requested a review from gregw August 18, 2021 15:11
@sbordet sbordet merged commit 9f896c6 into jetty-10.0.x Aug 19, 2021
@sbordet sbordet deleted the jetty-10.0.x-6624-non-domain-sni-java17 branch August 19, 2021 11:56
@sbordet sbordet added this to In progress in Jetty 10.0.7/11.0.7 FROZEN via automation Aug 25, 2021
@sbordet sbordet moved this from In progress to Done in Jetty 10.0.7/11.0.7 FROZEN Aug 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
No open projects
Development

Successfully merging this pull request may close these issues.

org.eclipse.jetty.client.HttpClientTLSTest#testForcedNonDomainSNI fails on java17
2 participants