Server Name Indication (SNI) Usage in SSC (Tomcat)

  • Document ID:KM03188655
  • Creation Date:22-Jun-2018
  • Modified Date:22-Jun-2018
    • Micro Focus Products:
      fortify software security center 16.20

This document has not been formally reviewed for accuracy and is provided "as is" for your convenience.

Summary

SNI is not supported in Tomcat http_ jars prior to version 4.5.3. The following jar files must be updated within the /webapps/ssc/WEB-INF/lib folder: httpclient.jar httpcore.jar httpmime.jar The recommended minimum versions to get SNI to work are: httpclient-4.5.5.jar httpcore-4.4.9.jar httpmime-4.5.5.jar

Question

Communications are being refused from SSC to the target server when Server Name Indication (SNI) is in use.  Applies to versions 17.10 and older

Answer

SNI is not supported in Tomcat http_ jars prior to version 4.5.3.  The following jar files must be updated within the <tomcat>/webapps/ssc/WEB-INF/lib folder:

httpclient<version>.jar
httpcore<version>.jar
httpmime<version>.jar

The recommended minimum versions to get SNI to work are:
httpclient-4.5.5.jar
httpcore-4.4.9.jar
httpmime-4.5.5.jar