What OpenSSL parameter is used to specify the host name for TLS Server Name Indication?

What OpenSSL parameter is used to specify the host name for TLS Server Name Indication?

• A. -tlsname
• B. -servername
• C. -host
• D. -service

Answer: (B)

The parameter used in OpenSSL to specify the host name for TLS Server Name Indication (SNI) is derived from the need to establish the correct TLS session when multiple hostnames are served by a single IP address. The SNI feature allows the client to indicate the hostname it is attempting to connect to at the beginning of the TLS handshake. This is crucial for servers that host more than one domain on the same IP address, allowing them to present the correct SSL certificate based on the hostname requested. The correct parameter, which is -servername, lets the user specify the hostname that the client will communicate with. This ensures that the appropriate SSL certificate is presented during the handshake process, thus establishing a secure connection tailored to the specific hostname. Other options, while they may seem plausible, do not correspond to the standard way to specify the SNI hostname in OpenSSL. Each of them either refers to different functionalities or parameters within OpenSSL that do not specifically handle the hostname for SNI.

The parameter used in OpenSSL to specify the host name for TLS Server Name Indication (SNI) is derived from the need to establish the correct TLS session when multiple hostnames are served by a single IP address. The SNI feature allows the client to indicate the hostname it is attempting to connect to at the beginning of the TLS handshake. This is crucial for servers that host more than one domain on the same IP address, allowing them to present the correct SSL certificate based on the hostname requested.

The correct parameter, which is -servername, lets the user specify the hostname that the client will communicate with. This ensures that the appropriate SSL certificate is presented during the handshake process, thus establishing a secure connection tailored to the specific hostname.

Other options, while they may seem plausible, do not correspond to the standard way to specify the SNI hostname in OpenSSL. Each of them either refers to different functionalities or parameters within OpenSSL that do not specifically handle the hostname for SNI.