<html><body><div><div>I dig a bit deeper on this subject and I think it has been introduced by <a href="https://github.com/openjdk/jdk/commit/ba837b4bfa2dea85653d8a8fccd0817a569b4378#diff-25625467b43d4f533bace30665a2d8aaaf60ec7323bd424ff7683e5afd722d14R130" rel="noopener noreferrer">https://github.com/openjdk/jdk/commit/ba837b4bfa2dea85653d8a8fccd0817a569b4378#diff-25625467b43d4f533bace30665a2d8aaaf60ec7323bd424ff7683e5afd722d14R130</a> using the hostname from the HTTP request and not using sslParameters#setServerNames anymore.<br></div><div><br></div><div>In the library, I force the IP in the HTTP request to enforce the target IP keeping the HTTP host header and SNI aligned with the actual value. The detected SNI is then empty, is it possible to support both detected and specified SNI?<br></div><div><br></div><div>Thanks for the help in advance,<br></div><div><br></div><div>Best regards,<br></div><div><br></div><div>Nicolas Henneaux<br></div><div><br></div><div><br></div><blockquote type="cite"><div>On Nov 18, 2024, at 4:25 PM, Nicolas Henneaux <nicolas@henneaux.io> wrote:<br></div><div><br></div><div><br></div><div><div>Hi all,<br></div><div><br></div><div>I have built a small library to
target several IP behind a given HTTPS endpoint based
on <a rel="noopener noreferrer" href="http://java.net">java.net</a>.http.HttpClient, <a rel="noopener noreferrer" href="https://github.com/nhenneaux/resilient-httpclient">https://github.com/nhenneaux/resilient-httpclient</a>. <br></div><div><br></div><div>It relies for some endpoints on SNI
server name specified through method <a rel="noopener noreferrer" href="http://java.net">java.net</a>.http.HttpClient.Builder#sslParameters#setServerNames.<br></div><div><br></div><div>Since
Java 22, it does not work properly for some endpoints, e.g. <a rel="noopener noreferrer" href="http://google.com">google.com</a>. I have enabled debug ssl logs and I
get the following log indicating the SNI is ignored.<br></div><div><br></div><div><div><a rel="noopener noreferrer" href="http://javax.net">javax.net</a>.ssl|WARNING|62|HttpClient-1-Worker-0|2024-11-18
15:51:49.496 CET|ServerNameExtension.java:265|Unable to indicate server
name<br></div><div><a rel="noopener noreferrer" href="http://javax.net">javax.net</a>.ssl|DEBUG|62|HttpClient-1-Worker-0|2024-11-18
15:51:49.496 CET|SSLExtensions.java:272|Ignore, context unavailable
extension: server_name<br></div></div><div><br></div><div>I have a pull request showing the issue for some hosts <a rel="noopener noreferrer" href="https://github.com/nhenneaux/resilient-httpclient/pull/68/files">https://github.com/nhenneaux/resilient-httpclient/pull/68/files</a>.<br></div><div><br></div><div>Is it something expected on Java 22+ or a bug was introduced?<br></div><div><br></div><div>Thank you for your help,<br></div><div><br></div><div>Best regards,<br></div><div><br></div><div>Nicolas Henneaux<br></div></div></blockquote><div><br></div><div><br></div></div><div><br></div></body></html>