Hi Guillaume, On Tue, Sep 04, 2012 at 09:16:17AM +0200, Willy Tarreau wrote: > Hi, > > On Tue, Sep 04, 2012 at 09:12:53AM +0200, Guillaume Castagnino wrote: > > Hi, > > > > Great news ! > > Just one question: is SNI support planned ? This would be great to allow > > one certificate per named vhost. > > Yes it's planned but not done yet. Emeric sees how to implement this but > we wanted to propose an early pre-release so that we can get feedback while > we're developing.
Just an update on the subject, Emeric managed to get a working version yesterday evening with SNI and wildcard certs. We're still facing a bit too many #ifdefs to support the various openssl versions, and we're try to simplify this, but I think that by the end of the week-end I'll be able to release -dev12 with a working SSL+SNI implementation. If I get enough time, I'll try to also add some SNI-based ACLs. Regards, Willy
