{"action":"created","issue":{"url":"https://api.github.com/repos/thumbor/thumbor/issues/409","labels_url":"https://api.github.com/repos/thumbor/thumbor/issues/409/labels{/name}","comments_url":"https://api.github.com/repos/thumbor/thumbor/issues/409/comments","events_url":"https://api.github.com/repos/thumbor/thumbor/issues/409/events","html_url":"https://github.com/thumbor/thumbor/issues/409","id":54666783,"number":409,"title":"SNI support for default Http loader ","user":{"login":"stetelepta","id":1556129,"avatar_url":"https://avatars.githubusercontent.com/u/1556129?v=3","gravatar_id":"","url":"https://api.github.com/users/stetelepta","html_url":"https://github.com/stetelepta","followers_url":"https://api.github.com/users/stetelepta/followers","following_url":"https://api.github.com/users/stetelepta/following{/other_user}","gists_url":"https://api.github.com/users/stetelepta/gists{/gist_id}","starred_url":"https://api.github.com/users/stetelepta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stetelepta/subscriptions","organizations_url":"https://api.github.com/users/stetelepta/orgs","repos_url":"https://api.github.com/users/stetelepta/repos","events_url":"https://api.github.com/users/stetelepta/events{/privacy}","received_events_url":"https://api.github.com/users/stetelepta/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-01-17T16:39:51Z","updated_at":"2015-01-22T21:55:46Z","closed_at":null,"body":"Since a few months, guess just after [Poodle](http://en.wikipedia.org/wiki/POODLE), some websites that use https seem to require [SNI](http://en.wikipedia.org/wiki/Server_Name_Indication). \r\nNow I find these errors in the log:\r\n```\r\n2015-01-17 07:57:37 tornado.general:WARNING uncaught exception\r\nTraceback (most recent call last):\r\n  File \"/path/to/virtualenvs/my_virtualenv/local/lib/python2.7/site-packages/tornado/stack_context.py\", line 239, in wrapped\r\n    callback(*args, **kwargs)\r\n  File \"/path/to/virtualenvs/my_virtualenv/local/lib/python2.7/site-packages/tornado/simple_httpclient.py\", line 315, in _on_close\r\n    raise HTTPError(599, message)\r\nHTTPError: HTTP 599: [Errno 1] _ssl.c:504: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure\r\n```\r\n\r\nI tried to upgrade python to 2.7.9, that includes SNI support, but I guess the loader (or tornado) must be support it too. [this articles addresses the issue more deeply](https://www.mnot.net/blog/2014/05/09/if_you_can_read_this_youre_sniing)"},"comment":{"url":"https://api.github.com/repos/thumbor/thumbor/issues/comments/71107072","html_url":"https://github.com/thumbor/thumbor/issues/409#issuecomment-71107072","issue_url":"https://api.github.com/repos/thumbor/thumbor/issues/409","id":71107072,"user":{"login":"stetelepta","id":1556129,"avatar_url":"https://avatars.githubusercontent.com/u/1556129?v=3","gravatar_id":"","url":"https://api.github.com/users/stetelepta","html_url":"https://github.com/stetelepta","followers_url":"https://api.github.com/users/stetelepta/followers","following_url":"https://api.github.com/users/stetelepta/following{/other_user}","gists_url":"https://api.github.com/users/stetelepta/gists{/gist_id}","starred_url":"https://api.github.com/users/stetelepta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stetelepta/subscriptions","organizations_url":"https://api.github.com/users/stetelepta/orgs","repos_url":"https://api.github.com/users/stetelepta/repos","events_url":"https://api.github.com/users/stetelepta/events{/privacy}","received_events_url":"https://api.github.com/users/stetelepta/received_events","type":"User","site_admin":false},"created_at":"2015-01-22T21:55:46Z","updated_at":"2015-01-22T21:55:46Z","body":"It appears that Tornado 4.0.2 does not pass the parameter \"server_hostname\" to ssl_wrap_socket. Servers that are very strict on using SNI will now raise the handshake error.\r\n\r\nIt's already fixed but not yet released: https://github.com/tornadoweb/tornado/commit/ab706d692e83d146b2b8ecfc502414bc49cbdd01\r\n"}}