client to support SNI

Aleksandar Lazic al-openssh at none.at
Sat Dec 7 09:56:52 AEDT 2019


Hi.

Looks like every ~2 Years raises someone the question about SNI support in the
openssh client.

2015: https://marc.info/?l=openssh-unix-dev&m=143248436518985&w=2
2017: https://marc.info/?l=openssh-unix-dev&m=150204655205911&w=2

I have read the docs and haven't seen anything about that this feature is
already available in SSH.

https://man.openbsd.org/ssh.1
https://man.openbsd.org/ssh_config.5

It looks like that the OpenSSH community don't like to implement such a feature,
from my point of vies. Maybe there is a possibility to use the ProxyCommand for
a solution?

https://man.openbsd.org/ssh_config.5#ProxyCommand

The Server http://www.rutschle.net/tech/sslh/README.html offers the possibility
to handle HTTPS & SSH on the same port therefore it would be nice to have a
client witch helps HTTPS front doors to select the right backend based on SNI
Header.

Any suggestions for a possible solution?

Best regards
Alex


More information about the openssh-unix-dev mailing list