@recaptime-dev's working patches + fork for Phorge, a community fork of Phabricator. (Upstream dev and stable branches are at upstream/main and upstream/stable respectively.)
hq.recaptime.dev/wiki/Phorge
phorge
phabricator
Diviner: Remove coverage of a 15 year old SNI problem
Summary: OpenSSL 1.0.0 was released in March 2010 and saw its End of Life in 2016.
Test Plan: None.
Reviewers: O1 Blessed Committers, mainframe98
Reviewed By: O1 Blessed Committers, mainframe98
Subscribers: tobiaswiese, valerio.bozzolan, Matthew, Cigaryno
Differential Revision: https://we.phorge.it/D26377
+1
-13
+1
-13
src/docs/user/configuration/troubleshooting_https.diviner
+1
-13
src/docs/user/configuration/troubleshooting_https.diviner
···
65
65
66
66
$ openssl s_client -connect example.com:443 -servername example.com
67
67
68
-
Replace **both** instances of "example.com" with your domain. If you receive
69
-
an error in `SSL23_GET_SERVER_HELLO` with `reason(1112)`, like this:
70
-
71
-
CONNECTED(00000003)
72
-
87871:error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112):
73
-
/SourceCache/OpenSSL098/OpenSSL098-44/src/ssl/s23_clnt.c:602:
74
-
75
-
...it indicates server is misconfigured. The most common cause of this problem
76
-
is an Apache server that does not explicitly name the Phorge domain as a
77
-
valid VirtualHost.
78
-
79
-
This error occurs only for some versions of the OpenSSL client library
80
-
(from v0.9.8r or earlier until 1.0.0), so only some users may experience it.
68
+
Replace **both** instances of "example.com" with your domain.