On Dec 11, 2013, at 9:49 AM, Vikram <mvikramadi...@yahoo.com> wrote:

> Thanks Alan. It does look like I have to jump through a few hoops to get this 
> working.
> 
> I might actually go have a look at the code to see why this is not possible 
> out of the box with ATS. Seems like a useful feature to have. Squid does this 
> through SslBump I believe. I am new to the ATS code, so any pointers as to 
> where I can start looking will be appreciated.

Certificate selection (mostly) happens in ssl_servername_callback(), see 
<https://github.com/apache/trafficserver/blob/master/iocore/net/SSLUtils.cc#L162>.
 Ideally, this would be plumbed through to the plugin API, but the synchronous 
API model is not a great fit for that.

> 
> If anyone else has any insights as to whether there is an easier way, thats 
> appreciated too :)
> 
> Thanks,
> Vikram

Reply via email to