Certificate without SNI about rustls

[cpu]

Hi @atik7,

Can you provide more information? What are you trying that isn't working? Do you have an error message to share? What is the domain name/address of the server you're trying to connect to?

[atik7]

I used a certificate that doesn't have SNI, and has CN = ABC

So how to use server name here?

let server_name = "www.rust-lang.org".try_into().unwrap();

[cpu]

I used a certificate that doesn't have SNI, and has CN = ABC

server name indication (SNI) is a property of the TLS handshake and not the server certificate, so I think we can set that part of the question aside.

Can you share the server certificate PEM? It would be easier to answer your question that way.

In short, if the certificate doesn't have at least one subject alternate name (SAN) with a domain name or IP address value, you won't be able to connect to a server using that certificate with Rustls without disabling certificate validation (unsafe) or implementing a custom certificate validator.

[atik7]

Thanks, I will check example for custom validation,