You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2020/12/29 01:27:35 UTC

[GitHub] [apisix] spacewander commented on issue #3147: bug: How to config ssl for ip

spacewander commented on issue #3147:
URL: https://github.com/apache/apisix/issues/3147#issuecomment-751914665


   > Well I dig the issues and found someone said the sni doesnot support ip
   
   The RFC 6066 says "Literal IPv4 and IPv6 addresses are not permitted" in the SNI: https://tools.ietf.org/html/rfc6066
   Even we don't follow the RFC, the client may follow it and do not send SNI when the target is an IP. So support IP at our side doesn't always work.
   
   > use a self signed cert for ip in apisix
   
   What about using a virtual domain like k8s's svc.cluster.local?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org