[Bug 201446] Server name indication is not supported in base OpenSSL

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201446

            Bug ID: 201446
           Summary: Server name indication is not supported in base
                    OpenSSL
           Product: Base System
           Version: 10.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: standards
          Assignee: freebsd-standards at FreeBSD.org
          Reporter: g_amanakis at yahoo.com

There seems to be a problem regarding SNI (TLS Server Name Indication) with the
OpenSSL 1.0.1l installed in the base system of FreeBSD 10.1. 

For example:
OpenSSL 1.0.1l in base system
/usr/bin/openssl s_client -servername chrismeller.com -connect
chrismeller.com:443
returns 
"Verify return code: 20 (unable to get local issuer certificate)"

OpenSSL 1.0.2c from ports
/usr/local/bin/openssl s_client -servername chrismeller.com -connect
chrismeller.com:443
returns 
"Verify return code: 0 (ok)"

-- 
You are receiving this mail because:
You are the assignee for the bug.