# TLS SNI support disabled

**URL:** <https://www.ruby-forum.com/t/tls-sni-support-disabled/219428>\
**Category:** NGINX\
**Created:** [May 2, 2012, 9:34pm UTC](https://www.ruby-forum.com/t/tls-sni-support-disabled/219428 "2012-05-02T21:34:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gurdipe\_D](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/b77776/32.png) [@Gurdipe\_D](https://www.ruby-forum.com/u/Gurdipe_D)\
**Post date:** [May 2, 2012, 9:34pm UTC](https://www.ruby-forum.com/t/tls-sni-support-disabled/219428/1 "2012-05-02T21:34:56Z")

</div>

I was rebuilding nginx on a staging server and noticed: _TLS SNI support  
disabled_

# /usr/local/nginx/sbin/nginx -V

nginx version: nginx/1.0.15  
built by gcc 4.1.2 20080704 (Red Hat 4.1.2-48/CentOS 5.5 Final)  
TLS SNI support disabled

Is that something I should be concerned about?

Thanks in advance.

Regards,

Justin D. [http://www.twitter.com/jdorfman](http://www.twitter.com/jdorfman)

---

<div class="post-metadata">

**Author:** ![jmadtech](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/7cd45c/32.png) [@jmadtech](https://www.ruby-forum.com/u/jmadtech)\
**Post date:** [May 2, 2012, 9:54pm UTC](https://www.ruby-forum.com/t/tls-sni-support-disabled/219428/2 "2012-05-02T21:54:48Z")

</div>

On Wed, 2012-05-02 at 12:34 -0700, Justin D. wrote:

> Is that something I should be concerned about?  
> Most likely not. Great feature, not widely supported across browsers  
> yet.

> **[Server Name Indication](https://en.wikipedia.org/wiki/Server_Name_Indication)**
>
> Server Name Indication (SNI) is an extension to Transport Layer Security (TLS) where a client indicates which hostname it is attempting to connect to at the start of the handshaking process. The extension allows a server to present one of multiple possible certificates on the same IP address and port number, allowing for multiple services (including HTTPS websites) to be served by the same IP address without using a single certificate. For HTTPS, it is the conceptual equivalent to HTTP/1.1 vi Pr...

Cliff

---

<div class="post-metadata">

**Author:** ![jmadtech](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/7cd45c/32.png) [@jmadtech](https://www.ruby-forum.com/u/jmadtech)\
**Post date:** [May 2, 2012, 10:22pm UTC](https://www.ruby-forum.com/t/tls-sni-support-disabled/219428/3 "2012-05-02T22:22:45Z")

</div>

This is great. Thanks Cliff and Jim =)

Regards,

Justin D. [http://www.twitter.com/jdorfman](http://www.twitter.com/jdorfman)

---

<div class="post-metadata">

**Author:** ![jmadtech](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/7cd45c/32.png) [@jmadtech](https://www.ruby-forum.com/u/jmadtech)\
**Post date:** [May 2, 2012, 10:05pm UTC](https://www.ruby-forum.com/t/tls-sni-support-disabled/219428/4 "2012-05-02T22:05:59Z")

</div>

On 5/2/12 3:54 PM, Cliff W. wrote:

> > Is that something I should be concerned about?

TLS/SNI support is enabled if you build nginx “–with-http\_ssl\_module”  
and if you have an recent enough version of OpenSSL on your system. I  
don’t think OpenSSL is recent enough on RHEL/CentOS 5.x but should be in  
6.x.

> Most likely not. Great feature, not widely supported across browsers  
> yet.

If you exclude Windoze XP and older, and older versions of MacOS, it is  
fairly widely supported. I think the biggest problem is the still large  
installed base of XP.

[Server Name Indication - Wikipedia](http://en.wikipedia.org/wiki/Server_Name_Indication#Support) (sorry for  
the Wikipedia reference but it seems accurate as of this writing).

> [Server Name Indication - Wikipedia](http://en.wikipedia.org/wiki/Server_Name_Indication)
> 
> Cliff
> 
> * * *
> 
> nginx mailing list  
> [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> [mailman.nginx.org archive](http://mailman.nginx.org/mailman/listinfo/nginx)

–  
Jim O.