I was rebuilding nginx on a staging server and noticed: TLS SNI support
disabled
/usr/local/nginx/sbin/nginx -V
nginx version: nginx/1.0.15
built by gcc 4.1.2 20080704 (Red Hat 4.1.2-48/CentOS 5.5 Final)
TLS SNI support disabled
Is that something I should be concerned about?
Thanks in advance.
Regards,
Justin D. http://www.twitter.com/jdorfman
On Wed, 2012-05-02 at 12:34 -0700, Justin D. wrote:
Is that something I should be concerned about?
Most likely not. Great feature, not widely supported across browsers
yet.
Server Name Indication (SNI) is an extension to Transport Layer Security (TLS) where a client indicates which hostname it is attempting to connect to at the start of the handshaking process. The extension allows a server to present one of multiple possible certificates on the same IP address and port number, allowing for multiple services (including HTTPS websites) to be served by the same IP address without using a single certificate. For HTTPS, it is the conceptual equivalent to HTTP/1.1 vi Pr...
Cliff
This is great. Thanks Cliff and Jim =)
Regards,
Justin D. http://www.twitter.com/jdorfman
On 5/2/12 3:54 PM, Cliff W. wrote:
Is that something I should be concerned about?
TLS/SNI support is enabled if you build nginx “–with-http_ssl_module”
and if you have an recent enough version of OpenSSL on your system. I
don’t think OpenSSL is recent enough on RHEL/CentOS 5.x but should be in
6.x.
Most likely not. Great feature, not widely supported across browsers
yet.
If you exclude Windoze XP and older, and older versions of MacOS, it is
fairly widely supported. I think the biggest problem is the still large
installed base of XP.
Server Name Indication - Wikipedia (sorry for
the Wikipedia reference but it seems accurate as of this writing).
Server Name Indication - Wikipedia
Cliff
nginx mailing list
[email protected]
mailman.nginx.org archive
–
Jim O.