Hi, Using NSS 3.35. It looks tstclnt always send SNI extension, even though no option "-a". As for selfserv, I suppose it should have an option for configuring multiple certificates (nicknames) for server side. But I don't find it.
In addition, option "-n" means rsa_nickname, but with my testing, it also works with the nicknames for DSA and ECDSA certificates, though such nicknames should use options -S and -e respectively. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
