superawesome

4 ms·

1. 1.▲
   by superawesome 14y ago

   Do you have TLSv1.0 disabled (see briansmith's comment)?
2. 2.▲
   by superawesome 14y ago

   Wild guess... are you on WinXP? WinXP + any version of IE does not support TLS SNI... even though it does support TLSv1.0, it doesn't support the SNI extension. Supported in Vista and 7, though. Chrome, Firefox, and Opera (on any platform)
3. 3.▲
   by superawesome 14y ago

   s_client doesn't support SNI, so this is expected behavior. The client (s_client) doesn't know how to tell the server what hostname it's requesting during the handshake... so the server returns the default one. After the handshake completes
4. 4.▲
   by superawesome 14y ago

   I see you commented on a fix already, but here's some background... This is due to TLS SNI, which allows different certs to be returned based on the hostname requested. SNI is supported by all major browsers on all major platforms, with 1 s