Hi,

just a quick SSL/TLS question, I don't know if this is the right general
area, but here goes.

Reading the TLS rfc and netscape ssl draft it appears to me that the server
can initiate a renegotiation request at anytime.

If this is the case, would it be possible to actually receive the headers of
a http client request using one server certificate and then ask the client
to renegotiate, and receive the remaining portion of the request (if any)
and then send the response using another server certificate?

The reason I ask is obviously to determine if it is possible to host
multiple ssl certificates off a single IP address, using host headers to
determine which ultimate certificate to use to do the bulk of the http
transaction.

thanks,
Luke



Reply via email to