Uploaded image for project: 'Confluence Server and Data Center'
  1. Confluence Server and Data Center
  2. CONFSERVER-45964

SNI is not working as expected in in Confluence 6.0.2

    XMLWordPrintable

    Details

      Description

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      In CONF-3582 Jonathon noticed that SNI doesn't appear to be implemented in all parts of Confluence correctly. Specifically when setting up a gadget feed URL in Confluence, the Client Hello packet which is sent to the server does not include the SNI extension. Attached is a packet capture showing the TLS/SSL transaction in Confluence 6.0.2 when configuring a gadget feed, and also a packet capture for creating an Application Link.

      This is important to fix as we have customers who may be running JIRA data center (or other applications) behind apache or nginx, and are expecting to parse this SNI extension.

        Attachments

        1. capture_applink1.pcap
          8 kB
        2. capture_gadget1.pcap
          28 kB

          Issue Links

            Activity

              People

              Assignee:
              dblack David Black
              Reporter:
              dblack David Black
              Votes:
              8 Vote for this issue
              Watchers:
              16 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: