On page
http://nginx.org/en/docs/http/configuring_https_servers.html
It clearly should say “Since OpenSSL 0.9.8j this option…” or perhaps
“…supports SNI since 0.8.9f version…”. As is it’s logically
inconsistent. See extract:
"
In order to use SNI in nginx, it must be supported in both the OpenSSL
library with which the nginx binary has been built as well as the
library to which it is being dynamically linked at run time. OpenSSL
supports SNI since 0.9.8f version if it was built with config option
“–enable-tlsext”. Since OpenSSL 0.8.9j this option is enabled by
default. If nginx was built with SNI support, then nginx will show this
when run with the “-V” switch:
"
– Sent from Pre phone - Please forgive typos
On Wed, 10 Nov 2010 14:42:41 +0300
Igor S. [email protected] wrote:
"
OpenSSL supports SNI starting with 0.9.8f version. Nowever, you have to
enable this capability during OpenSSL building using the option
“–enable-tlsext”. Since OpenSSL 0.8.9j this option is enabled by default.
Is this better ?
“”“version. Nowever, you have to enable this “”” → version. However,
you have to enable this
seems better to me.
Cheers,
C.
On Wed, Nov 10, 2010 at 06:33:57AM -0500, Merlin Meyer-Mitchell wrote:
On page
Configuring HTTPS servers
It clearly should say “Since OpenSSL 0.9.8j this option…” or perhaps
“…supports SNI since 0.8.9f version…”. As is it’s logically
inconsistent. See extract:
"
In order to use SNI in nginx, it must be supported in both the OpenSSL library
with which the nginx binary has been built as well as the library to which it is
being dynamically linked at run time. OpenSSL supports SNI since 0.9.8f version if
it was built with config option “–enable-tlsext”. Since OpenSSL 0.8.9j this
option is enabled by default. If nginx was built with SNI support, then nginx will
show this when run with the “-V” switch:
"
OpenSSL supports SNI starting with 0.9.8f version. Nowever, you have to
enable this capability during OpenSSL building using the option
“–enable-tlsext”. Since OpenSSL 0.8.9j this option is enabled by
default.
Is this better ?
–
Igor S.
http://sysoev.ru/en/
On Wed, Nov 10, 2010 at 03:26:41PM +0300, Maxim D. wrote:
It clearly should say “Since OpenSSL 0.9.8j this option…” or perhaps
“…supports SNI since 0.8.9f version…”. As is it’s logically
inconsistent. See extract:
- 0.9.8j
Thank you, I have fixed the current edition.
–
Igor S.
http://sysoev.ru/en/
Hello again !
just checking the page, I fumble into another typo in the title of a
section:
“SSL certifcate chains” should be “SSL certificate chains”, I guess 
Cheers,
C.
On Wed, 10 Nov 2010 15:33:14 +0300
Hello!
On Wed, Nov 10, 2010 at 02:42:41PM +0300, Igor S. wrote:
"
OpenSSL supports SNI starting with 0.9.8f version. Nowever, you have to
enable this capability during OpenSSL building using the option
“–enable-tlsext”. Since OpenSSL 0.8.9j this option is enabled by default.
Is this better ?
Maxim D.