Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot connect to IP addresses on OpenBSD (LibreSSL) #482

Closed
matteocorti opened this issue Nov 21, 2023 · 1 comment
Closed

Cannot connect to IP addresses on OpenBSD (LibreSSL) #482

matteocorti opened this issue Nov 21, 2023 · 1 comment
Assignees
Labels

Comments

@matteocorti
Copy link
Owner

Describe the bug

The script fails to connect to hosts specified with an IP address on OpenBSD with LibreSSL

To Reproduce

./check_ssl_cert -H 138.201.94.172
SSL_CERT CRITICAL 138.201.94.172:443: SSL error: Unable to set TLS servername extension. 

Expected behavior

/check_ssl_cert -H 138.201.94.172
SSL_CERT OK - 138.201.94.172:443, https, x509 certificate 'corti.li' from 'Let's Encrypt' valid until Feb  1 19:04:54 2024 GMT (expires in 72 days)|days_chain_elem1=72;20;15;; days_chain_elem2=664;20;15;; days_chain_elem3=314;20;15;;

System (please complete the following information):

  • OS: OpenBSD
  • OS version: 7.4
  • check_ssl_cert version: 2.76.0
  • OpenSSL version (openssl version): LibreSSL 3.8.2

Additional context/output

LibreSSL does not accept an IP as -servername:

$ /usr/bin/openssl s_client     -crlf  -connect 138.201.94.172:443 -servername 138.201.94.172   -showcerts -verify 6
verify depth is 6
Unable to set TLS servername extension.
77968620024:error:1404E13F:SSL routines:ST_BEFORE_CONNECT:ssl3 ext invalid servername:/usr/src/lib/libssl/s3_lib.c:1838:
@matteocorti matteocorti self-assigned this Nov 21, 2023
@matteocorti
Copy link
Owner Author

Fixed with 7f0a507

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant