Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-45964

SNI is not working as expected in in Confluence 6.0.2

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      In CONF-3582 jkennemer noticed that SNI doesn't appear to be implemented in all parts of Confluence correctly. Specifically when setting up a gadget feed URL in Confluence, the Client Hello packet which is sent to the server does not include the SNI extension. Attached is a packet capture showing the TLS/SSL transaction in Confluence 6.0.2 when configuring a gadget feed, and also a packet capture for creating an Application Link.

      This is important to fix as we have customers who may be running JIRA data center (or other applications) behind apache or nginx, and are expecting to parse this SNI extension.

      Attachments

        1. capture_gadget1.pcap
          28 kB
        2. capture_applink1.pcap
          8 kB

        Issue Links

          Activity

            People

              dblack David Black
              dblack David Black
              Votes:
              8 Vote for this issue
              Watchers:
              16 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: