# Problems with TLS SNI Server Name Indication when using IE9

**URL:** <https://www.ruby-forum.com/t/problems-with-tls-sni-server-name-indication-when-using-ie9/218175>\
**Category:** NGINX\
**Created:** [March 23, 2012, 9:23am UTC](https://www.ruby-forum.com/t/problems-with-tls-sni-server-name-indication-when-using-ie9/218175 "2012-03-23T09:23:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![luislavena](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/0ea827/32.png) [@luislavena](https://www.ruby-forum.com/u/luislavena)\
**Post date:** [March 23, 2012, 9:23am UTC](https://www.ruby-forum.com/t/problems-with-tls-sni-server-name-indication-when-using-ie9/218175/1 "2012-03-23T09:23:14Z")

</div>

Hi there,

For those successfully using TLS SNi for https servers.

My IE9 (on Windows7 64 bit) fails to trigger the correct nginx virtual  
https  
server name and SSL certificate (It ignores all except the default -1st  
server).

But It seems to work fine with FF10 and Chrome17.

Is this an IE9 issue? or am I missing something from my nginx/openssl  
compilation options?

/usr/local/nginx/sbin/nginx -V

nginx version: nginx/1.0.13

built by gcc 4.1.2 20080704 (Red Hat 4.1.2-51)

TLS SNI support enabled

configure arguments: --with-debug --prefix=/usr/local/nginx  
–sbin-path=/usr/local/nginx/sbin --with-http\_ssl\_module  
–with-http\_gzip\_static\_module --with-http\_realip\_module  
–with-http\_addition\_module --with-sha1=/usr/lib --with-md5=/usr/lib  
–with-openssl=/home/holscha/downloads/openssl/openssl-1.0.1

bin/openssl version -a

openSSL 1.0.1 14 Mar 2012

built on: Tue Mar 20 23:19:10 CET 2012

platform: linux-x86\_64

options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int)  
blowfish(idx)

compiler: gcc -DZLIB\_SHARED -DZLIB -DOPENSSL\_THREADS -D\_REENTRANT  
-DDSO\_DLFCN -DHAVE\_DLFCN\_H -Wa,–noexecstack -m64 -DL\_ENDIAN -DTERMIO  
-O3  
-Wall -DOPENSSL\_IA32\_SSE2 -DOPENSSL\_BN\_ASM\_MONT -DOPENSSL\_BN\_ASM\_MONT5  
-DOPENSSL\_BN\_ASM\_GF2m -DSHA1\_ASM -DSHA256\_ASM -DSHA512\_ASM -DMD5\_ASM  
-DAES\_ASM -DVPAES\_ASM -DBSAES\_ASM -DWHIRLPOOL\_ASM -DGHASH\_ASM

OPENSSLDIR: “/usr/local/ssl”

.

# 

# Default Server

# 

server {

```
    listen 443;

    server_name myaccount.yabroo.at;

    ssl on;

    ssl_certificate

```

/etc/httpd/ssl/myaccount.yabroo.at/myaccount.yabroo.at.crt;

```
    ssl_certificate_key

```

/etc/httpd/ssl/myaccount.yabroo.at/myaccount.yabroo.at.key;

…

}

server {

```
    listen 443;

    server_name admin.yabroo.com;

    ssl on;

    ssl_certificate 

```

/etc/httpd/ssl/yabroocom/admin.yabroo.com.crt;

```
    ssl_certificate_key 

```

/etc/httpd/ssl/yabroocom/admin.yabroo.com.key;

…

}

…

server {

```
    listen 443;

    server_name myaccount.yabroo.com;

    ssl on;

    ssl_certificate

```

/etc/httpd/ssl/myaccount.yabroo.com/myaccount.yabroo.com.crt;

```
    ssl_certificate_key

```

/etc/httpd/ssl/myaccount.yabroo.com/myaccount.yabroo.com.key;

…

}

Regards

Axel

---

<div class="post-metadata">

**Author:** ![Axel\_Holscher\_SSSGM](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/3da27b/32.png) [@Axel\_Holscher\_SSSGM](https://www.ruby-forum.com/u/Axel_Holscher_SSSGM)\
**Post date:** [March 23, 2012, 1:24pm UTC](https://www.ruby-forum.com/t/problems-with-tls-sni-server-name-indication-when-using-ie9/218175/2 "2012-03-23T13:24:41Z")

</div>

Hello!

On Fri, Mar 23, 2012 at 10:22:38AM +0200, Axel Holscher (GMAIL) wrote:

> My IE9 (on Windows7 64 bit) fails to trigger the correct nginx virtual https  
> server name and SSL certificate (It ignores all except the default -1st  
> server).
> 
> But It seems to work fine with FF10 and Chrome17.
> 
> Is this an IE9 issue? or am I missing something from my nginx/openssl  
> compilation options?

Most likely it’s IE issue, your nginx config looks fine. You may  
try looking what’s happening on the wire (e.g. in wireshark) or  
just test if you see the same behaviour on the clean install of  
Win7 + IE9 (google search suggests some incorrect registry  
settings may cause problems).

Maxim D.