Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

How can i configure SNI to get the benifts ...........I am using openssl 1.0.0 beta5 and apache 2.2.14. Can anyone tell me the complete procedure . I am configuring virtual host in ssl.conf files and having diff certs to each site hosted on apache.

Need help its urgent

share|improve this question

closed as off-topic by Jenny D, Ward, kasperd, Andrew Schulman, MadHatter Mar 31 at 12:21

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

    
Might be worth mentioning that SNI is not supported on Internet Explorer on Windows XP. Depending on the user base for your site/s this may be a big concern for you. –  ThatGraemeGuy Apr 18 '10 at 19:13

1 Answer 1

I've never tried it, but the documentation seems to say that you only need to have an OpenSSL which supports SNI, which should do as you need Apache 2.2.12 and OpenSSL 0.9.8j or better, the rest of the configuration should be the same as normal SSL configuration in apache, that is, adding something like :

SSLEngine on
SSLCertificateFile "/path/to/your.crt"
SSLCertificateKeyFile "/path/to/your.key"
SSLVerifyClient None

to your vhost.

You may add a :

SSLStrictSNIVHostCheck on

if you see fit.

share|improve this answer
    
Plus you need the NameVirtualHost directive. See here: digicert.com/ssl-support/… –  Surranó Mar 31 at 6:52
    
@Surranó but you've always needed NameVirtualHost with apache 2.2, wether you need ssl, sni or not. And you don't need it starting with apache 2.4. –  mat Mar 31 at 11:53