Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Jul 2015 23:47:45 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-standards@FreeBSD.org
Subject:   [Bug 201446] Server name indication is not supported in base OpenSSL
Message-ID:  <bug-201446-15@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201446

            Bug ID: 201446
           Summary: Server name indication is not supported in base
                    OpenSSL
           Product: Base System
           Version: 10.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: standards
          Assignee: freebsd-standards@FreeBSD.org
          Reporter: g_amanakis@yahoo.com

There seems to be a problem regarding SNI (TLS Server Name Indication) with the
OpenSSL 1.0.1l installed in the base system of FreeBSD 10.1. 

For example:
OpenSSL 1.0.1l in base system
/usr/bin/openssl s_client -servername chrismeller.com -connect
chrismeller.com:443
returns 
"Verify return code: 20 (unable to get local issuer certificate)"

OpenSSL 1.0.2c from ports
/usr/local/bin/openssl s_client -servername chrismeller.com -connect
chrismeller.com:443
returns 
"Verify return code: 0 (ok)"

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-201446-15>