Server Name Indication is an extension of Transport Layer Security which allows multiple secure web sites to be hosted at the same IP address.

learn more… | top users | synonyms

0
votes
1answer
396 views

Is it possible to install an SSL certificate without a dedicated IP on Plesk servers?

Have people here succesfully installed an SSL certificate by using SNI (server name identification) on a Plesk server? Can you please tell me how you have done it? I am a little wary of updating ...
2
votes
3answers
1k views

What percentage of web users are running on browsers/OSes that support SNI? [closed]

Has anyone done any analysis (or know where I can find some!) on what proportion of internet users are using a browser/operating system combination that support SNI (Server Name Indication) SSL/TLS ...
2
votes
1answer
275 views

Resolve a many-SSL-to-one IP for clients browsers that doesn't support SNI

Whoa, acronyms :) So according to this question you can have multiple SSL subdomains on one IP address as long as your server supports TLS (which Apache 2.2x does). Another answer to that question ...
1
vote
1answer
1k views

Is it possible to get a wildcard cert and use SNI?

I'd like to make setting up new subdomains easy (at least for the development side) and getting one wildcard cert, setting up a wildcard dns (which is done and works great) and setting up SNI (Server ...
2
votes
2answers
411 views

Have Nginx reject unknown server names over HTTPS

I have an Nginx instance using SNI to serve multiple HTTPS domains from a single IP. The only glitch with the setup is that Nginx responds with the first (acting as default) domain whenever a URL for ...
1
vote
1answer
1k views

How to configure Apache with gnutls [closed]

I'm wanting SNI on my CentOS 5.5 dev server and since it looks like I'm out of luck with the current repo versions of openssl and apache, before I go compiling custom RPMs I thought I'd see if I could ...
1
vote
1answer
952 views

Why is Firefox on XP reporting “Connection is Untrusted”

To those of you familiar with the RFC 4366 TLS "Server Name Indication" (SNI) extension, which allows multiple SSL certificates on the same IP address, here’s the scenario: URL: ...
0
votes
1answer
175 views

Apache2 crashes with Firefox on SSL requests and works fine with IE

We have a server with multiple SSL-enabled vhosts, certificate is the same for all of them. SNI does not seem to be enabled. When I try to open any url (even the one which is supposed to throw 404 ...
0
votes
1answer
436 views

is a wildcard SSL the only option in this multiple VHOST/1IP setup?

I have a web app set up that needs the following SSL encryption: secure.myapp.com -> SSL www.myapp.com/login -> SSL www.myapp.com/signup -> SSL If I'm correct, I could run one SSL ...
2
votes
2answers
601 views

Windows Vista Wrong Certificate With SNI

I'm setting up SNI on an apache server and I thought things were going well. I have two URLs from different domains that point at the same site. I have one virtual host setup for each with the ...
1
vote
1answer
440 views

Setup Apache 2.2 With SNI Under Ubuntu 8.04

I am trying to setup SNI on a server running Ubuntu 8.04 with openssl 0.9.8g and apache 2.2.8. I know that I need either mod_gnutils or openssl 0.9.8j (I think) to support SNI. Is it possible to do ...
67
votes
5answers
40k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
1answer
1k views

How to configure SNI so as to have benifits of SNI

How can i configure SNI to get the benifts ...........I am using openssl 1.0.0 beta5 and apache 2.2.14. Can anyone tell me the complete procedure . I am configuring virtual host in ssl.conf files and ...
3
votes
3answers
7k views

Upgrading OpenSSL in CentOS 5.3

I want to use one IP to host many domains with individual SSL certificates (requires SNI). In CentOS 5.3, the latest version of OpenSSL I can find an RPM for is 0.9.8e, which does not support SNI. I ...