Re: mod_ssl, SNI and dynamic virtual hosts

2010-06-04 Thread Adam Hasselbalch Hansen
Adam Hasselbalch Hansen wrote: Thomas, Peter wrote: -Original Message- From: Adam Hasselbalch Hansen [mailto:a...@one.com] Sent: Tuesday, May 25, 2010 7:06 AM To: dev@httpd.apache.org Subject: Re: mod_ssl, SNI and dynamic virtual hosts So what I'm attempting to get feedback

Re: mod_ssl, SNI and dynamic virtual hosts

2010-05-27 Thread Adam Hasselbalch Hansen
Thomas, Peter wrote: -Original Message- From: Adam Hasselbalch Hansen [mailto:a...@one.com] Sent: Tuesday, May 25, 2010 7:06 AM To: dev@httpd.apache.org Subject: Re: mod_ssl, SNI and dynamic virtual hosts So what I'm attempting to get feedback on is whether or not it will be possible

Re: mod_ssl, SNI and dynamic virtual hosts

2010-05-25 Thread Adam Hasselbalch Hansen
Adam Hasselbalch Hansen wrote: We have a setup that uses an in-house module which works not entirely unlike mod_vhost_alias, in that it has a single virtual host configured, and then determines stuff like domain name, docroot, etc, from the request. We'd love to be able to use SSL in this

Re: mod_ssl, SNI and dynamic virtual hosts

2010-05-25 Thread Ivan Ristic
You are assuming that the domain name will be in the SSL handshake. While it will be, in many cases, a very large number of browsers won't send it. In particular, Internet Explorer running on Windows XP does not support SNI. For more information, have a look at:

Re: mod_ssl, SNI and dynamic virtual hosts

2010-05-25 Thread Adam Hasselbalch Hansen
Ivan Ristic wrote: You are assuming that the domain name will be in the SSL handshake. While it will be, in many cases, a very large number of browsers won't send it. In particular, Internet Explorer running on Windows XP does not support SNI. For more information, have a look at:

Re: mod_ssl, SNI and dynamic virtual hosts

2010-05-25 Thread Eric Covener
On Tue, May 25, 2010 at 7:05 AM, Adam Hasselbalch Hansen a...@one.com wrote: So what I'm attempting to get feedback on is whether or not it will be possible or even feasible to move certificate loading (as in the actual reading of certificate files) from startup time to request time, and if so,

RE: mod_ssl, SNI and dynamic virtual hosts

2010-05-25 Thread Thomas, Peter
these files might not have been present on the system at httpd's startup? Warmly, --Pete -Original Message- From: Adam Hasselbalch Hansen [mailto:a...@one.com] Sent: Tuesday, May 25, 2010 7:06 AM To: dev@httpd.apache.org Subject: Re: mod_ssl, SNI and dynamic virtual hosts So what I'm

mod_ssl, SNI and dynamic virtual hosts

2010-05-10 Thread Adam Hasselbalch Hansen
We have a setup that uses an in-house module which works not entirely unlike mod_vhost_alias, in that it has a single virtual host configured, and then determines stuff like domain name, docroot, etc, from the request. We'd love to be able to use SSL in this setup, but as far as I can see,