Quantcast
Channel: Daniel Lange's blog (Entries tagged as sni)
Viewing all articles
Browse latest Browse all 2

Ahh, the joy of Cloudflare SNI certificates

$
0
0

Nice neighbourhood, https://www.amsterdam.nl...

For your copy and paste pleasure:

openssl s_client -connect www.amsterdam.nl:443</dev/null | openssl x509 -noout-text|grep DNS:

Screenshot of openssl s_client -connect www.amsterdam.nl:443

Update

03.11.18: Cloudflare fixed this mess somewhat. They now look for SNI servernames and use customer-specific certs. See:

openssl s_client -servername www.amsterdam.nl -connect www.amsterdam.nl:443</dev/null | openssl x509 -noout-text|grep DNS:

(notice the -servername in the above vs. the original command that will fail with something like 140246838507160:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:769: now)


Viewing all articles
Browse latest Browse all 2

Latest Images

Trending Articles





Latest Images