RestClient not working with SNI enabled endpoint

[todzheng]

with Ribbon RestClient 2.2.0 and Apache HttpClient4.5.2, invoking an SNI enabled endpoint results in "handshake_failure" because server_name extension is not in SSL handshake.

While directly using Apache HttpClient4.5.2 can successfully negotiate and server_name extension is successful.

RestClient 2.2.0 appears to be using SSLSocketFactory which is deprecated by apache; while directly using Apache HttpClient uses SSLConnectionSocketFactory.

Is there any workaround?

[clatko]

SNI needs to be added as an SSLParameter to the SSLEngine. That engine is only created in rxNetty, but has been overriden in LoadBalancingHttpClient - https://github.com/Netflix/ribbon/blob/master/ribbon-transport/src/main/java/com/netflix/ribbon/transport/netty/http/LoadBalancingHttpClient.java#L510

You would have to add code there or modify rxNetty. I really don't think there is a clean way to do it without the rxNetty modification.

[clatko]

#391