Bug #10467: net/http reconnects without SNI

• Status: Closed
• Assignee: naruse (Yui NARUSE)
• Target version: 2.2.0
• ruby -v: ruby 2.1.2p95 (2014-05-08 revision 45877) [x86_64-linux] AND ruby 2.2.0preview1 (2014-09-17 trunk 47616) [x86_64-linux]
• Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN

[dissolve (Ben Roberts)]

When using net/http and reusing a connection after a 5 minute timeout, the reconnection fails on Servers using SNI that do not return the same ssl key when using a non-sni connection.

I used wireshark to confirm that the second attempt to connect is returning the incorrect SSL certificate (the certificate the server returns without the hostname set)

Attaching a test script to easily reproduce the error.

[dissolve (Ben Roberts)]

This looks to be a duplicate now of #10533, which has a patch

[naruse (Yui NARUSE)]

• Status changed from Open to Closed