Dear Maksym,

> So, for the time being, we have no such support in NaviServer.

With the commit [1], i've added the first draft for server-side SNI
to NaviServer. It is not fully finished, but sufficiently stable
(already running onĀ  OpenACS.org) and should provide the
basic server-side support to supply and use per-virtual-server
certificates (see [1] for a configuration example). If possible
test this with your configuration.

The known open items are listed below.

all the best

-g

TODOs:
- add support for OCSP with SNI
- add support for Diffie Hellman with SNI
- add "ciphersuites" to ns_http
- add documentation for virtual hosting with nsssl

[1] https://bitbucket.org/naviserver/naviserver/commits/4662b12c3c548db4b2d0ed6625c66260662d2089



_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to