ssl

Understanding an SSL error - "default host as no SNI was provided"


I have a minor web app running on Dreamhost that accepts webhook calls from a third-party. My logs are suddenly showing an SSL connection error, and I am trying to better understand the error message so I know whether it is an issue with my shared webhost or with the third party.

ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.example.com provided via HTTP have no compatible SSL setup

Is there anyway to tell from this if the problem is with my end or the third party making the call? As far as I can tell, the third party is using https:// to making the call.


Solution

  • ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided)

    The error basically says that the client is using TLS without Server Name Indication (SNI). SNI is used to select the appropriate server side setup early in the TLS handshake to provide the correct certificate. It is absolutely needed when having different certificates for different domains on the same IP address. All modern clients support this.

    ... and hostname www.example.com provided via HTTP have no compatible SSL setup

    The suggests that even the Host header send in the HTTP request (after TLS handshake) does not match any configuration at your server.

    Is there anyway to tell from this if the problem is with my end or the third party making the call?

    If it works for everybody else then the problem is likely not at your end. But before blaming the third party for doing something wrong make sure that this is even a relevant request you expect, instead of the common internet noise where your server gets probed from all around the world.