SNI : Java Glossary

*0-9ABCDEFGHIJKLMNOPQRSTUVWXYZ (all)

SNI

SNI (Server Name Indication) is a protocol used by SSL (Secure Sockets Layer) (aka HTTPS (Hypertext Transfer Protocol over SSL (Secure Socket Layer)): or TLS (Transport Layer Security)) servers to allow them to serve several websites, each with its own SSL certificate all from the same IP. If you want to talk to an SSL server that supports SNI, you usually need to do a

System.setProperty( "jsse.enableSNIExtension", "true" );

first. If you want to talk to an SSL server than does not support SNI, you usually need to do a

System.setProperty( "jsse.enableSNIExtension", "false" );

first. Unfortunately, there is no setting that will always work for both. You have to keep track. Most sites do not support it.

Tips

RFEs (Request For Enhancements)

Here is how I would like Oracle to fix the situation to make handling SNI easier:


This page is posted
on the web at:

http://mindprod.com/jgloss/sni.html

Optional Replicator mirror
of mindprod.com
on local hard disk J:

J:\mindprod\jgloss\sni.html
Canadian Mind Products
Please the feedback from other visitors, or your own feedback about the site.
Contact Roedy. Please feel free to link to this page without explicit permission.

IP:[65.110.21.43]
Your face IP:[54.205.13.200]
You are visitor number