hi,

CXF WebClient doesn't seem to send SNI headers.  my main virtual host has
the default ssl certificate so most of my rest interfaces work fine.  but if
i try to add certificates to other virtual hosts it causes errors like
Caused by:
java.io.IOException: HTTPS hostname wrong:  should be 
<my-host-qa.my.company.com> 

i upgraded to TomEE 7 and one of the reasons was because it has SNI support
and i thought that might fix this problem.  I run TomEE behind httpd anyway
so this was not the problem in my case.  so it must be the WebClient not
sending SNI header

one solution seems to be to create one big ssl certificate for the server
that includes all the domain names.  this could be costly or time consuming. 
another solution might be to run a custom sslfactory but i don't really
understand how to do this.  is it set up in beans.xml or something? 

is there a chance that cxf might be fixed and that in turn this be included
in a future tomEE release?



--
View this message in context: 
http://tomee-openejb.979440.n4.nabble.com/cxf-doesn-t-send-sni-tp4680589.html
Sent from the TomEE Users mailing list archive at Nabble.com.

Reply via email to