Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

The correct answer is B. -servername. -servername is the correct flag for specifying the SNI hostname in openssl s_client, as documented in OpenSSL's man pages - it tells the client which hostname to include in the TLS ClientHello so the server can select the appropriate certificate. The other options are all…

Network Security

Question

Options

A-tlsname
B-servername
C-sniname
D-vhost
E-host

How the community answered

(30 responses)

B
87% (26)
C
3% (1)
D
3% (1)
E
7% (2)

Explanation

-servername is the correct flag for specifying the SNI hostname in openssl s_client, as documented in OpenSSL's man pages - it tells the client which hostname to include in the TLS ClientHello so the server can select the appropriate certificate. The other options are all fabricated: -tlsname, -sniname, -vhost, and -host do not exist as valid openssl s_client parameters (note: -connect is the actual flag for specifying the host/port to connect to, not -host). A useful memory tip: think "server name" - SNI exists so servers know which virtual host you want, and OpenSSL mirrors that concept directly with -servername.

Topics

#openssl s_client#Server Name Indication#TLS/SSL#Host verification

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice