Any HTTPS clients without SNI support in repositories?

Question

I want to test how my server behaves for a client that have a switch for disabling or doesn't have SNI support at all. Preferably, one with a command-line interface and in official repositories.

Can I disable SNI in wget or curl?

Possibly useful: http://stackoverflow.com/a/12942331/2072269 (conditions required for SNI-supporting curl) — muru, Dec 12 '15 at 08:06
Thanks, both comments are useful. ie6 is an option and if you want, you can post it as an answer and I'll mark it as a solution until a better one appears. — int_ua, Dec 14 '15 at 01:34

score 1 · Accepted Answer · answered Aug 30 '18 at 11:31

1

openssl s_client without specifying -servername:

echo | openssl s_client -connect ###.###.###.###:443 2>/dev/null | awk '/Certificate chain/,/---/'

vs

echo | openssl s_client -connect domain.name:443 -servername domain.name 2>/dev/null | awk '/Certificate chain/,/---/'

answered Aug 30 '18 at 11:31

int_ua

8,574

1

Note that you need -noservername in new OpenSSL versions, as using SNI is the default, see this answer – SWdV May 23 '23 at 13:06

Any HTTPS clients without SNI support in repositories?

1 Answers1