Re: How to get SNI info from s_client debug logs?

["Salz, Rich via openssl-users" <openssl-users@xxxxxxxxxxx>]

• 1. Why does s_server need option "-servername"?

 

For debugging, so that you can test that clients are sending the right SNI extension and properly handling the TLS error when they don’t.

 

• 2. It looks options -servername and -alpn cannot work together.

 

Yes, kind-of.  The s_client and s_server programs aren’t fully-featured production programs. 

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users