Nginx 0.7.65 + OpenSSL 0.9.8k = SNI support?

Hi guys,

I have been wondering, does the following setting support SNI (Server Name Indication) ?

Nginx 0.7.65

OpenSSL 0.9.8k

nginx -V: indicates it has SNI enabled.

openssl version -a: I don't know which parameter to check, but I am pretty sure openssl 0.9.8j+ has SNI support compiled by default.

but when I try to add different SSL certificates, only one certificate is passed for all vhosts (ie. different domains), which of course produce certificate mis-match error.

I use Firefox 3.6.3, which should support SNI natively.

I have also done the same thing with apache2 before, which works on firefox.

I have no idea what I am missing from nginx vhost conf. file.

listen 443;

ssl on;

ssl_certificate /etc/nginx/ssl/www.domain.tld.crt;

sslcertificatekey /etc/nginx/ssl/www.domain.tld.key;

Any ideas?

1 Reply

just a quick update for ppl interested:

It does work! With default package! No compile headache!

though you should make sure you have correct setting for each vhost (ie. server {…} in nginx)

ref: http://wiki.nginx.org/NginxHttpSslModule

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct