Re: Server Name Indication interface

2008-11-24 Thread Victor Duchovni
On Mon, Nov 24, 2008 at 10:25:24AM -0500, Patrick Patterson wrote: > > There will be no support for separately tunable SSL options per target > > hostname, the only variables from name to name are the contents of > > the PKCS#12 containers associated with each name. > > Can you also make it so tha

Re: Server Name Indication interface

2008-11-24 Thread Patrick Patterson
Hi Victor: On November 21, 2008 04:06:44 pm Victor Duchovni wrote: > The server-side SNI support in OpenSSL seems to be targeted at HTTPS > virtual host configurations, in which each Virtual host is associated > with its own SSL_CTX object, initialized not only with a separate > key+cert+trust cha

Server Name Indication interface

2008-11-21 Thread Victor Duchovni
The server-side SNI support in OpenSSL seems to be targeted at HTTPS virtual host configurations, in which each Virtual host is associated with its own SSL_CTX object, initialized not only with a separate key+cert+trust chain, but also with a separate cipherlist, list of trusted CAs (really X509_S