https://bugzilla.wikimedia.org/show_bug.cgi?id=63435

            Bug ID: 63435
           Summary: tools.wmflabs.org rejects SNI with tools.wmflabs.org
           Product: Wikimedia Labs
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: Unprioritized
         Component: tools
          Assignee: m...@uberbox.org
          Reporter: t...@tim-landscheidt.de
                CC: benap...@gmail.com, t...@tim-landscheidt.de
       Web browser: ---
   Mobile Platform: ---

https://tools.wmflabs.org/ rejects connections where the client indicates an
SNI of tools.wmflabs.org.  This is apparently important for Java applications
in particular (cf.
http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7177232).

To reproduce:

| openssl s_client -connect tools.wmflabs.org:443 

opens a connection just fine, while:

| openssl s_client -servername tools.wmflabs.org -connect tools.wmflabs.org:443
| openssl s_client -servername tools-webproxy -connect tools.wmflabs.org:443
| openssl s_client -servername tools-webproxy.eqiad.wmflabs -connect
tools.wmflabs.org:443

all fail.  I'm unable to log into tools-webproxy, so I can't debug this further
at the moment.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to