Security - Java 8 Recipes - page 858

System.out.println("Starting handshake...");
sslSocket.startHandshake();
System.out.println("Handshake complete...");
System.out.println("Peer Host: "
+ sslSocket.getSession().getPeerHost());
sslSocket.close();
System.exit(1);
} catch (UnknownHostException e) {
System.out.println(e);
System.exit(1);
} catch (IOException e) {
System.out.println(e);
System.exit(1);
}
}
}
Given the client, the server must use a SNIMatcher class to indicate how to re-
cognize the server name. The following code demonstrates a server side implementa-
tion for determining whether a host name matches a SNIMatcher object.
final int httpd = 443;
SSLServerSocket sslServerSocket = null;
try {
ServerSocketFactory sslFactory
= SSLServerSocketFactory.getDefault();
sslServerSocket = (SSLServerSocket)
sslFactory.createServerSocket(httpd);
SNIMatcher matcher
= SNIHostName.createSNIMatcher("www\\.gmail\\.(com|org)");
Collection<SNIMatcher> matchers = new ArrayList<>(1);
matchers.add(matcher);
SSLParameters params
= sslServerSocket.getSSLParameters();
params.setSNIMatchers(matchers);
sslServerSocket.setSSLParameters(params);