Cherokee has SNI support already. Checkout http://www.cherokee-project.com/doc/other_goodies.html
Tony Z On Mon, Oct 11, 2010 at 5:35 AM, Raldnor <[email protected]> wrote: > Hi Justin, > > Apache can do the trick, see: > http://httpd.apache.org/docs/2.0/mod/mod_proxy.html > The proxy needs to support the Connect method it seems (I'm not familiar > with the details). > > Here's the relevant text from Nicolas: > -------------- > Hi all, I know OpenVPN-ALS is now discontinued, but it works very well and > I needed a way to put an OpenVPN-ALS behind a reverse proxy to allow > multiple HTTPS/SSL access with a single IP address. > The main OpenVPN-ALS part works without problem behind a reverse proxy > (Apache). The real challenge was to get the agent running. > I got it running by sending an "HTTP CONNECT" to the reverse proxy to allow > the agent to communicate directly with the server. I wrote a patch (a lot of > files to modify) to allow the configuration of the reverse proxy in the user > profile (like the forward proxy). Everything is working perfectly (with or > without forward proxy). When you work with a forward proxy, the agent will > send 2 "HTTP CONNECT", one to the forward proxy and a second one to the > reverse proxy, to open a tunnel to the server. To get everything running, > you need a recent version of Apache (with SNI support), openssl with SNI > support and a patch to Apache to allow "HTTP CONNECT" through a SSL virtual > host. If somebody is interested in such a solution, drop a line on the forum > or the mailinglist and I'll try to build a clean patch and write some > generic instructions. > > Nicolas > ------------- > > Can Cherokee support this as well? > > Thanks! > > R. > > _______________________________________________ > Cherokee mailing list > [email protected] > http://lists.octality.com/listinfo/cherokee > >
_______________________________________________ Cherokee mailing list [email protected] http://lists.octality.com/listinfo/cherokee
