Tool for testing SNI extensions with wolfSSL and the sniffer.

snisvr assumes that CyaSSL is installed in /usr/local. It uses the certificates and keys found in ../cyassl/certs.

Run it from the command line and it listens on port 11111. It will send one blob of HTML back to the client depending on the server name provided in the Client Hello. The command is simply ./snisvr.

In another window run the CyaSSL example client. The -S option is used to set the SNI. The snisvr tool exects this to be either svrA, svrB, or not used.

$ ./examples/client/client -g -S svrA

The server webpage should indicate itself as either Server A, Server B, or generic, depending on the SNI.

The SSL sniffer should be run from its directory, sslSniffer/sslSnifferTest. When run without command line options, it will first ask for the interface to use, select lo0. Next, enter port 11111. Last enter the alternate SNI to use. In this test use either svrA or svrB.

When SNI enabled, the sniffer by default will load the default key onto the SSL_CTX, and will add on the same key associated to the provided name to be used if the name is detected in the SNI.