Apache 2.4.64 and SNI

Pavel Matěja <[email protected]> Fri, 11 Jul 2025 15:24:47 +0200
Newsgroups gmane.comp.apache.user
Organization Verotel IT Services s.r.o.
Message-ID <[email protected]>
Hi,
I've just updated Apache to the 2.4.64 version and it's kind of strange.
I used to got proper response from Apache with multiple virtual hosts.

When I tested using
openssl s_client -connect A.B.C.D:443 -crlf -noservername
after upgrade I got:

421 Misdirected Request

"The client needs a new connection for this
request as the requested host name does not match
the Server Name Indication (SNI) in use for this
connection."

But as the s_client had -noservername parameter there was no SNI 
hostname at all.

There is
AH02032: Hostname our_first_vhost.test.com (default host as no SNI was 
provided) and hostname hostname_from_s_client_header.test.com provided 
via HTTP have no compatible SSL setup
in Apache error log.

I had to enable SNI in Nagios checks, etc.

Was this intended?

-- 
Pavel Matěja