On Thu, Apr 9, 2009 at 4:10 AM, Tero Lampiluoto <lampilu...@gmail.com> wrote:
> Hello,
>
> Using SNI doesn't change the fact that you can only use
> one certificate file (public and private key) per unique IP:port.
> Right?

That's what it changes, becasue the Client Hello contains the same
data as the Host: header.

>
> SNI is mostly useful when one is using wildcard and/or
> SubjectAltName (SAN) extension certificate. In these cases you can
> serve number different sites with the same certificate key pair.

This works today (all SSL settings in default vhost)

-- 
Eric Covener
cove...@gmail.com

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org
For additional commands, e-mail: docs-h...@httpd.apache.org

Reply via email to