<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, May 9, 2016 at 3:30 PM, Radim Vansa <span dir="ltr"><<a href="mailto:rvansa@redhat.com" target="_blank">rvansa@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":wh" class="a3s aXjCH">So you can initiate connection with SSL (+SNI) and then downgrade it to<br>
plain-text?</div></blockquote></div><br>No, that's not possible. SNI Host Name is used to match proper certificate from KeyStore. After successful handshake, you communicate further with SSL/TLS.</div></div>