Server Name Indication is an extension of Transport Layer Security which allows multiple secure web sites to be hosted at the same IP address.
0
votes
1answer
21 views
Stop default SSL response on Shared IP using SNI
Previously I asked a question here: Single domain SSL presented for all domains on Shared IP about setting up secure and non-secure domains on a single IP.
Opinions were mixed, but it appears SNI ...
1
vote
3answers
29 views
Apache SNI namevhosts always route to first VirtualHost entry
Update
So for some strange reason, the problem seems to have resolved itself.
Perhaps it's some sort of strange caching issue or something (though I have apache2ctl stop/start/restart and sudo ...
-1
votes
1answer
23 views
Is it possible to log the IP address for SNI in apache logs on errors?
Is it possible to log the IP address associated with SNI in the apache logs?
I realize that this is SSL when it connects, so if its not now, Im wondering if
apache would add it so at least we could ...
1
vote
1answer
50 views
How can I detect if a server is using SNI for HTTPS?
I'm looking for a simple way to know if a server is using the Server Name Indication SSL extension for its HTTPS certificate on a website. A method that uses either a browser or Unix command line is ...
0
votes
0answers
26 views
No SSLRequireSSL when ssl negotiation already happen
I am running an non-sni supported Apache server (2.2.3). The first virtualhost will always handle the ssl negotiation. Once the request is decrypted Apache can fine do the vhost handling. if I want to ...
0
votes
0answers
42 views
When did the TLS1.0 default (from enabled to disabled) in Windows (> XP) change?
I just deployed a preview site for one of my clients and made it available SSL-only due to required logins. To my surprise, shortly after I received the complaint that things are not working as ...
2
votes
1answer
121 views
How to define which SSL certificate nginx sends first with SNI?
I use nginx 1.2.7 with OpenSSL 0.9.8o on Debian Squeeze for about 30 domains. On two of them I enabled SSL which works fine on both.
The SSL config is use for both domains:
listen 443 ssl;
...
0
votes
0answers
56 views
OpenVPN support for TLS SNI?
I can not establish a VPN with OpenVPN (ubuntu 12.04, version 2.2.1-8ubuntu1) through HAProxy. It seems that OpenVPN does not support SNI (HAProxy uses SNI to forward the traffic to a correct node). ...
0
votes
1answer
60 views
From suPHP to mod_php
I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
1
vote
1answer
57 views
Understand ssl setup
Goals:
If the user support SNI and hit myurl1.server.com (https) or myurl2.server.com (https) it will match the right vhost. (the last 2 vhosts)
If the user does not support SNI and hit ...
0
votes
0answers
77 views
How to use SSL/HTTPS with a Heroku app that needs many different (wildcard) domain names?
I'm hosting a SaaS application in Heroku and my service offers user groups a possibility to get their own subdomain address for the group.
Say, my service is www.example.com and a user group can get ...
1
vote
1answer
213 views
Setting up default SSL site on IIS8
I have setup few websites on IIS8 all using the same wildcard SSL certificate. Some of the sites need to be accessible to older browsers and operating systems, therefore I cannot use the "Require ...
2
votes
1answer
70 views
Separate SSL certificate selection from virtual host configuration in apache
Currently, my apache configuration includes one SSL certificate (with all domains listed as Alternative Subject Names). I furthermore have one virtual host configuration per domain that serves both ...
1
vote
1answer
396 views
“Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile]” error
After recently upgrading Apache2 to version 2.2.31 I found a strange behaviour in SSL VirtualHost setup.
A few of the website I'm hosting were showing the certificate for the default host even if the ...
0
votes
1answer
295 views
Plesk 11: install Apache with SNI support
If I try to update from standard Apache to Apache with SNI support with the Plesk installation program (example.com:8447), I get an error, that I have to remove apr-util-ldap-1.4.1-1.el5.x86_64
It's ...
0
votes
0answers
235 views
How to fix the TLS Server Name Indication issue under Windows XP on Nginx using a different IP
I have a server that is using two different domains with two different certificates.
Everithing work fine except IE8 on Windows XP because the TLS Server Name Indication is not supported there.
In ...
4
votes
1answer
113 views
Does SNI represent a privacy concern for my website visitors?
Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes:
When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
1
vote
0answers
79 views
Debugging incorrect certificate with SNI for some clients
I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
1
vote
2answers
232 views
Why does apache httpd tell me that my name-based virtualhosts only works with SNI enabled browers (RFC 4366)
Why does apache give me this error message in my logs? Is it a false positive?
[warn] Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
I ...
0
votes
2answers
635 views
Hostname and SSL (apache) issue on Debian
I have been trying to setup SSL virtual host
ServerAdmin webmaster@mts.com
ServerName moclm.tap.pt
DocumentRoot /var/www/tapme/
<Directory />
Options ...
0
votes
2answers
637 views
Can't turn off SNI on apache
When I go to: http://web-sniffer.net/ and check the headers of my site (https://www.example.org), I get a status code 200
But when I use the radio button HTTP/1.0 (without Host header), I get a ...
0
votes
2answers
198 views
Apache with suexec, fcgid shows content from wrong vHost over ssl
I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec.
Allmost everything works fine. I wrote a ...
7
votes
5answers
1k views
Redirect to SSL only if browser supports SNI
I have Apache 2.2 with mod_ssl and a bunch of sites in HTTPS on the same IP/port with VirtualHosting, so client must support SNI to connect to those virtual hosts.
I would like to configure my server ...
3
votes
1answer
383 views
For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?
I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
0
votes
1answer
148 views
Setup SSL for only a Single website on Linux server with Multiple vhosts
Without configuring apache to support SNI, can I purchase a SSL cert and use on a Centos Linux server that has 2 name-based Vhost? I'm only interested in securing ONE of the two domains. Could this be ...
1
vote
1answer
289 views
HTTPS vhost multiplexing with upstream client certificate auth with nginx
Let's say I have two Apache servers (one per vhost) behind an nginx server.
The problem is that I'd like Apache to do the authentication of client certificates.
Would it be possible for nginx to do ...
2
votes
2answers
439 views
nginx, multiple domains, ssl support for clients without SNI
I want to support SSL for clients which lack of SNI support (IE/FF/Safari on win XP, Android < 2.2, and others).
The solution I picked was to have nginx listen on separate port for each ...
1
vote
1answer
1k views
Jenkins reports reverse proxy setup incorrect with Apache using virtual hosts with SNI
I'm setting up a Jenkins server, to run under Tomcat behind Apache. I'm using virtual hosts with SSL using SNI so I can access it at https://jenkins.example.com, and serve something else on, say, ...
1
vote
1answer
867 views
Set default TLS SNI vhost for Apache 2.2 on CentOS 6
I have a CentOS 6 server with Apache (httpd-2.2.15-15.el6.centos.x86_64). Now I configured TLS SNI using OpenSSL and that was pretty easy.
Now I have two TLS vhosts on the same ip and I want to ...
3
votes
3answers
1k views
Problems with multiple SSL on same IP, but only in select clients
I know there are tons of posts about multiple SSL on same IP, but I promise I'm not beating a dead horse. My question is very clear. First, a little background...
Our organization has several ...
1
vote
2answers
458 views
0
votes
1answer
248 views
Is it possible to install an SSL certificate without a dedicated IP on Plesk servers?
Have people here succesfully installed an SSL certificate by using SNI (server name identification) on a Plesk server?
Can you please tell me how you have done it? I am a little wary of updating ...
2
votes
3answers
403 views
What percentage of web users are running on browsers/OSes that support SNI? [closed]
Has anyone done any analysis (or know where I can find some!) on what proportion of internet users are using a browser/operating system combination that support SNI (Server Name Indication) SSL/TLS ...
2
votes
1answer
208 views
Resolve a many-SSL-to-one IP for clients browsers that doesn't support SNI
Whoa, acronyms :) So according to this question you can have multiple SSL subdomains on one IP address as long as your server supports TLS (which Apache 2.2x does).
Another answer to that question ...
1
vote
1answer
665 views
Is it possible to get a wildcard cert and use SNI?
I'd like to make setting up new subdomains easy (at least for the development side) and getting one wildcard cert, setting up a wildcard dns (which is done and works great) and setting up SNI (Server ...
2
votes
1answer
294 views
Have Nginx reject unknown server names over HTTPS
I have an Nginx instance using SNI to serve multiple HTTPS domains from a single IP.
The only glitch with the setup is that Nginx responds with the first (acting as default) domain whenever a URL for ...
1
vote
1answer
1k views
How to configure Apache with gnutls [closed]
I'm wanting SNI on my CentOS 5.5 dev server and since it looks like I'm out of luck with the current repo versions of openssl and apache, before I go compiling custom RPMs I thought I'd see if I could ...
1
vote
1answer
755 views
Why is Firefox on XP reporting “Connection is Untrusted”
To those of you familiar with the RFC 4366 TLS "Server Name Indication" (SNI) extension, which allows multiple SSL certificates on the same IP address, here’s the scenario:
URL: ...
0
votes
1answer
149 views
Apache2 crashes with Firefox on SSL requests and works fine with IE
We have a server with multiple SSL-enabled vhosts, certificate is the same for all of them.
SNI does not seem to be enabled.
When I try to open any url (even the one which is supposed to throw 404 ...
0
votes
1answer
399 views
is a wildcard SSL the only option in this multiple VHOST/1IP setup?
I have a web app set up that needs the following SSL encryption:
secure.myapp.com -> SSL
www.myapp.com/login -> SSL
www.myapp.com/signup -> SSL
If I'm correct, I could run one SSL ...
2
votes
2answers
510 views
Windows Vista Wrong Certificate With SNI
I'm setting up SNI on an apache server and I thought things were going well. I have two URLs from different domains that point at the same site. I have one virtual host setup for each with the ...
1
vote
1answer
408 views
Setup Apache 2.2 With SNI Under Ubuntu 8.04
I am trying to setup SNI on a server running Ubuntu 8.04 with openssl 0.9.8g and apache 2.2.8. I know that I need either mod_gnutils or openssl 0.9.8j (I think) to support SNI. Is it possible to do ...
-1
votes
2answers
2k views
Setting Up SNI with Apache 2.2.12 and openssl
I am running Apache 2.2.12 and openssl 0.9.8g all of my Apache are in /etc/apache2/sites-available/default and i have 2 domains with certificates www.site.com & d7.site.com my
<VirtualHost ...
56
votes
5answers
34k views
Multiple SSL domains on the same IP address and same port?
This is a Canonical Question about Hosting multiple SSL websites on the same IP.
I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
1answer
1k views
How to configure SNI so as to have benifits of SNI
How can i configure SNI to get the benifts ...........I am using openssl 1.0.0 beta5 and apache 2.2.14.
Can anyone tell me the complete procedure . I am configuring virtual host in ssl.conf files and ...
3
votes
3answers
4k views
Upgrading OpenSSL in CentOS 5.3
I want to use one IP to host many domains with individual SSL certificates (requires SNI). In CentOS 5.3, the latest version of OpenSSL I can find an RPM for is 0.9.8e, which does not support SNI.
I ...
