如何使用 HttpComponents (Java apache lib) 更改 TLS 握手中的服务器名称指示发出请求

Question

I have to make a request to a backend with TLS certificate and private key and in my troubleshooting I got error when using the same hostname in the Server Name Indication. See:

I got ERROR:

openssl s_client -connect endpoint.com:443 -servername endpoint.com

I got SUCCESS:

openssl s_client -connect endpoint.com:443 -servername another_endpoint_name.com

But I can't find a way to change the server name indication in the TLS Handshake in the Apache Lib. Is it even possible?

Related question: How to set SNI (Server Name Indication) in TLS Handshake using Apache HttpComponents Java

Answer 1

One can create a custom request route by using HttpHost with a resolved InetAddress .

Try out this code and let me know if that does the trick.

CloseableHttpClient httpClient = HttpClients.createSystem();
HttpHost host = new HttpHost(InetAddress.getByName("endpoint.com"), "another_endpoint_name.com", -1, "https");
try (CloseableHttpResponse response = httpClient.execute(host, new HttpGet("https://another_endpoint_name.com/stuff"))) {
    System.out.println(response.getStatusLine());
    EntityUtils.consume(response.getEntity());
}