You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafficserver.apache.org by "James Peach (Commented) (JIRA)" <ji...@apache.org> on 2012/03/01 05:44:13 UTC

[jira] [Commented] (TS-462) Support TLS Server Name Indication (SNI) negotiation

    [ https://issues.apache.org/jira/browse/TS-462?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219799#comment-13219799 ] 

James Peach commented on TS-462:
--------------------------------

It seems like you ought to be able to pull the hostname out of the certificate, which would enable SNI with zero configuration changes.

I'm going to take a stab at this; let's see how far I get ...
                
> Support TLS Server Name Indication (SNI) negotiation
> ----------------------------------------------------
>
>                 Key: TS-462
>                 URL: https://issues.apache.org/jira/browse/TS-462
>             Project: Traffic Server
>          Issue Type: New Feature
>          Components: SSL
>    Affects Versions: 3.0.0
>            Reporter: Leif Hedstrom
>            Assignee: Igor Galić
>            Priority: Minor
>              Labels: ssl
>             Fix For: 3.1.5
>
>
> We should support TLS Server Name Indication (SNI). This would allow for well behaved TLS clients to negotiate the certificate, without requiring a new IP for every site / certificate used.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira