Message10983

The real underlying problem for the SNI probe page we were trying (www.mnot.net) is that it uses Let's Encrypt, which did not have any CA support prior to Java 8u111. Just tested with an updated JDK and everything looks good. So some unfortunate delays here, but that's being busy.

I changed the title to reflect we still have SNI server support to add. Probably easy, but not something we should delay further for.

As usual, the best way to understand this problem was to compare to an alternative just using Java classes (with minimal Jython wrapping), vs the much more complex entity seen when using our socket/ssl/select alternative:

from __future__ import print_function

from java.io import BufferedInputStream
from java.net import URL
import jarray

url = URL("https://www.mnot.net/blog/2014/05/09/if_you_can_read_this_youre_sniing")
stream = BufferedInputStream(url.openStream())

data = []
while True:
    data.append(jarray.zeros(1024, "b"))
    amount_read = stream.read(data[-1], 0, 1024)
    if amount_read == -1:
        break

print("".join((buff.tostring() for buff in data)))