Nginx 0.7.65 + OpenSSL 0.9.8k = SNI support?
I have been wondering, does the following setting support SNI (Server Name Indication) ?
Nginx 0.7.65
OpenSSL 0.9.8k
nginx -V: indicates it has SNI enabled.
openssl version -a: I don't know which parameter to check, but I am pretty sure openssl 0.9.8j+ has SNI support compiled by default.
but when I try to add different SSL certificates, only one certificate is passed for all vhosts (ie. different domains), which of course produce certificate mis-match error.
I use Firefox 3.6.3, which should support SNI natively.
I have also done the same thing with apache2 before, which works on firefox.
I have no idea what I am missing from nginx vhost conf. file.
listen 443;
ssl on;
ssl_certificate /etc/nginx/ssl/
sslcertificatekey /etc/nginx/ssl/
Any ideas?
1 Reply
It does work! With default package! No compile headache!
though you should make sure you have correct setting for each vhost (ie. server {…} in nginx)
ref: