Why does cdn.jsdelivr.net support incorrect SNI?

What is the name of the domain?

What is the issue you’re encountering

How to enable this feature for my website?

What steps have you taken to resolve the issue?

Read the code

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Off

Screenshot of the error

You have explicitly asked your code to ignore any kind of certificate validation, with “rejectUnauthorized” set to “false”.

You are passing the “Host:” header “cdn.jsdelivr.net” to Cloudflare, within the “headers {}” block you have.

As you are ignoring certificate validations, “servername” does not matter for the TLS connection any more.

Once the requests hits Cloudflare, Cloudflare will select the appropriate content based on the “Host:” header, which in your case, is (still) “cdn.jsdelivr.net”.

There is no feature, and nothing to enable here.

Same will happen for every website, when you disable certificate validation, and (still) supply a correct “Host:” header, matching a valid virtual host configuration in the given web server you’re connecting to.

3 Likes

This is a feature, I can’t access nodev2ray.com with servername=abc, The servername option is the SNI of tls protocol.

Why exactly are you trying to do that?

1 Like

I want to bypass the GFШ ЅNІ bІockade.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.