SNI Extension missing in Client Hello Handshake to HTTPS backend

[armellin]

Our HTTPS backend expects the SNI extension in the Client Hello during the handshake, but it seems that the proxy is not sending it, so the backend drops the connection.
Is it by design? Or am I missing anything?

[nevola]

Hi @armellin, SNI extension is used in the client connections. SNI is not supported while connecting to the backends.

Regards.

[armellin]

Hi @nevola, according to this commit in zproxy by @abdessamad-zevenet it should be supported, isn't it?

Thanks for any further info.

[nevola]

Hi @armellin, the proxy code was rewritten due to design problems. This part is not included yet.

https://github.com/relianoid/proxyng/blob/8a8b426cd141f6e613c7bc64f31a68414c896f14/src/config.cpp#L1498

I would suggest to use layer 4 if it's possible meanwhile this code is re-enabled.
Kind Regards.