[openssl-users] How to get SNI info from s_client debug logs?

Salz, Rich rsalz at akamai.com
Mon Nov 27 13:27:05 UTC 2017


  *   1. Why does s_server need option "-servername"?

For debugging, so that you can test that clients are sending the right SNI extension and properly handling the TLS error when they don’t.



  *   2. It looks options -servername and -alpn cannot work together.

Yes, kind-of.  The s_client and s_server programs aren’t fully-featured production programs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20171127/09ee9e66/attachment-0001.html>


More information about the openssl-users mailing list