# Implementing SNI SSL?

**URL:** <https://www.ruby-forum.com/t/implementing-sni-ssl/140664>\
**Category:** NGINX\
**Created:** [June 17, 2008, 10:11am UTC](https://www.ruby-forum.com/t/implementing-sni-ssl/140664 "2008-06-17T10:11:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ewildgoose](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/bcef8e/32.png) [@ewildgoose](https://www.ruby-forum.com/u/ewildgoose)\
**Post date:** [June 17, 2008, 10:11am UTC](https://www.ruby-forum.com/t/implementing-sni-ssl/140664/1 "2008-06-17T10:11:18Z")

</div>

Hi, to recap on a previous thread - is nginx currently able to handle  
SNI based ssl virtual hosts (assuming latest 0.98 openssl)?

My host only allows a small number of IPs (8) and I have a bunch of  
currently unencrypted services (due to lack of free IPs) which might  
benefit from upgrading to SSL where it’s supported , ie Vista IE7 /  
Firefox, etc (currently \> 50% of my visitors)

Cheers

Ed W

---

<div class="post-metadata">

**Author:** ![ewildgoose](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/bcef8e/32.png) [@ewildgoose](https://www.ruby-forum.com/u/ewildgoose)\
**Post date:** [June 17, 2008, 10:25am UTC](https://www.ruby-forum.com/t/implementing-sni-ssl/140664/2 "2008-06-17T10:25:05Z")

</div>

On Tue, Jun 17, 2008 at 08:57:56AM +0100, Ed W wrote:

> Hi, to recap on a previous thread - is nginx currently able to handle  
> SNI based ssl virtual hosts (assuming latest 0.98 openssl)?
> 
> My host only allows a small number of IPs (8) and I have a bunch of  
> currently unencrypted services (due to lack of free IPs) which might  
> benefit from upgrading to SSL where it’s supported , ie Vista IE7 /  
> Firefox, etc (currently \> 50% of my visitors)

nginx supports SNI since 0.5.23, it was tested against development  
OpenSSL 0.9.9 year ago. OpenSSL SNI support had been merged to 0.9.8f,  
however I did not test it: it might be changed while merging.  
Also, note that SNI in OpenSSL 0.9.8 is not built by default.

---

<div class="post-metadata">

**Author:** ![ewildgoose](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/bcef8e/32.png) [@ewildgoose](https://www.ruby-forum.com/u/ewildgoose)\
**Post date:** [June 17, 2008, 11:10am UTC](https://www.ruby-forum.com/t/implementing-sni-ssl/140664/3 "2008-06-17T11:10:46Z")

</div>

> nginx supports SNI since 0.5.23, it was tested against development  
> OpenSSL 0.9.9 year ago. OpenSSL SNI support had been merged to 0.9.8f,  
> however I did not test it: it might be changed while merging.  
> Also, note that SNI in OpenSSL 0.9.8 is not built by default.

How should the config files be layed out to pick this up? Do I just  
setup a normal vhost type config with normal SSL directives on each and  
it should just work…?

Cheers

Ed W

P.S. This is quite exciting if it works…!

---

<div class="post-metadata">

**Author:** ![ewildgoose](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/bcef8e/32.png) [@ewildgoose](https://www.ruby-forum.com/u/ewildgoose)\
**Post date:** [June 17, 2008, 11:15am UTC](https://www.ruby-forum.com/t/implementing-sni-ssl/140664/4 "2008-06-17T11:15:29Z")

</div>

On Tue, Jun 17, 2008 at 09:57:31AM +0100, Ed W wrote:

> > nginx supports SNI since 0.5.23, it was tested against development  
> > OpenSSL 0.9.9 year ago. OpenSSL SNI support had been merged to 0.9.8f,  
> > however I did not test it: it might be changed while merging.  
> > Also, note that SNI in OpenSSL 0.9.8 is not built by default.
> 
> How should the config files be layed out to pick this up? Do I just  
> setup a normal vhost type config with normal SSL directives on each and  
> it should just work…?

Yes.