Metadata download error

[Cantor, Scott]

On 4/3/14, 11:38 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* Joy Veronneau <jv11 at cornell.edu> [2014-04-03 16:59]:
>> wget https://media.library.cornell.edu/saml/index/sp-metadata
>> --2014-04-03 10:39:26--
>>https://media.library.cornell.edu/saml/index/sp-metadata
>> Resolving media.library.cornell.edu... 38.74.193.98
>> Connecting to media.library.cornell.edu|38.74.193.98|:443... connected.
>> ERROR: certificate common name `*.mediaspace.kaltura.com' doesn't match
>>requested host name `media.library.cornell.edu'.
>
>There's definitively something weird going on. That cert seems fine
>when connecting with curl from a Debian Wheezy box:

I think curl is using SNI now to signal the name of the vhost to connect
to.

Newer OpenSSL versions also support that. I just tested that with
-servername in the s_client command, and it gets back the right cert.

-- Scott