X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 3F401385C6F2
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1699291988;
	bh=UoUM4JYWG+Tavrh7Cp2AsBzSiIt+qDsdo5k+eo3/034=;
	h=Date:To:Subject:In-Reply-To:References:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=h+FxzPlKNu9a5/9cMpoakVGu7PnjyI4N9Vc4Er5U2dt1uv3x0TG9NXZdIicpjTeDq
	 m/XnTgw2VohVsgeKVBaZYwwDeY3ZOCLaNzetJZQKCqaSWEOkSITnWwtAwt+zwROWwb
	 0zXYrZUkcrv0UUq7tVsMMFsK9f3N/BnVEX9+3b/8=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 70F103858417
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 70F103858417
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1699291859; cv=none;
 b=a9nb92bNtdt6PQugMvHtyq8aF+VBMTDedzlQDOaFCh2AlKIc9ySwOV6QBNSBBh5j53P0b0XfL+cc86fiAmhXwvYaWTvAm+bXS0Ep3Y3dNhPQ7O1jQcRzOou1LmS3Ejj+QCbsNr675+IyAgUrUGZ5vcrWL0Js+s5MaUxNc3rOX64=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1699291859; c=relaxed/simple;
 bh=zDlVsjaLhCd6gaNk+7s2Yr9OuhOr7klgaGkPvInwdXI=;
 h=DKIM-Signature:Date:From:Message-ID:To:Subject:MIME-Version;
 b=cJQSDRWrYMt3EXdFz7+JZhbNJGQwq3ChSfBktzMtnd+jPcd9DNi17FeeXp4PhulXDqc8dkKNoDSd4Io7BJ2i+3mLak2SsC9sRFgxUBZvrHoVybv+RtcgHmdJhBaIEtbC3svRDm6tXeb0p+9cZ6dx/2GN+zHyN+Q0JuFQa1NA8CE=
ARC-Authentication-Results: i=1; server2.sourceware.org
X-Yandex-Fwd: 1
Date: Mon, 8 May 2023 13:12:19 +0300
X-Mailer: The Bat! (v9.3.4) Professional
Message-ID: <1065214503.20230508131219@yandex.ru>
To: Yuri <yuri AT rawbw DOT com>, cygwin AT cygwin DOT com
Subject: Re: OpenSSL failure in Cygwin: SSL_set_tlsext_host_name returns 1
 (SSL_TLSEXT_ERR_ALERT_WARNING)
In-Reply-To: <b31136f2-3401-34a8-ba89-7528c906bcd3@tsoft.com>
References: <b31136f2-3401-34a8-ba89-7528c906bcd3 AT tsoft DOT com>
MIME-Version: 1.0
X-Spam-Status: No, score=-0.1 required=5.0 tests=BAYES_00, DATE_IN_PAST_96_XX,
 DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM,
 KAM_THEBAT, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,
 RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS, TXREP,
 T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Andrey Repin via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Andrey Repin <anrdaemon AT yandex DOT ru>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Greetings, Yuri!

> I've built the proxytunnel project in Cygwin
> (https://github.com/proxytunnel/proxytunnel).

> It is usually used to tunnel ssh through https using the https CONNECT command.


> The command "proxytunnel --no-check-certificate -E -p
> {https-proxy-host}:{https-proxy-port} -d 127.0.0.1:22" works on Linux and BSD.


> However, it fails in Cygwin with the exit code 1
> (SSL_TLSEXT_ERR_ALERT_WARNING), which causes this error message in proxytunnel:

 >> SSL_set_tlsext_host_name returned: 1 (0x1). TLS SNI error, giving up

This error means that a connecting party had sent server name which server did
not acknowledge.

> This prevents proxytunnel from being able to connect to the remote peer.


> What might be wrong?

If possible, I would look at the protocol log for connection, if I were you.


-- 
With best regards,
Andrey Repin
Monday, May 8, 2023 13:09:25

Sorry for my terrible english...


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple