Apache 2.4.64 and SNI
Pavel Matěja <[email protected]> Fri, 11 Jul 2025 15:24:47 +0200
| Newsgroups | gmane.comp.apache.user |
|---|---|
| Organization | Verotel IT Services s.r.o. |
| Message-ID | <[email protected]> |
Hi, I've just updated Apache to the 2.4.64 version and it's kind of strange. I used to got proper response from Apache with multiple virtual hosts. When I tested using openssl s_client -connect A.B.C.D:443 -crlf -noservername after upgrade I got: 421 Misdirected Request "The client needs a new connection for this request as the requested host name does not match the Server Name Indication (SNI) in use for this connection." But as the s_client had -noservername parameter there was no SNI hostname at all. There is AH02032: Hostname our_first_vhost.test.com (default host as no SNI was provided) and hostname hostname_from_s_client_header.test.com provided via HTTP have no compatible SSL setup in Apache error log. I had to enable SNI in Nagios checks, etc. Was this intended? -- Pavel Matěja