Server Name Indication(SNI) is an extension of Transport Layer Security which allows multiple secure web sites, with separate certificates, to be hosted at the same IP address

learn more… | top users | synonyms

0
votes
3answers
54 views

How to disable unconfigured HTTPS domains in apache2.4?

I want the server to respond to https://abc.def.com, but not to https://def.com, while still serving http://def.com when both domains point to the same IP address. I currently have a configuration ...
0
votes
2answers
3k views

Hostname and SSL (apache) issue on Debian

I have been trying to setup SSL virtual host <VirtualHost *:443> ServerAdmin webmaster@mts.com ServerName moclm.tap.pt SSLEngine on SSLCertificateFile /etc/ssl/moclm.cer ...
3
votes
1answer
703 views

Can TLSv1 / SNI be blocked by the network? (routers, firewalls, etc)

Our web site serves static content through a content delivery network (AWS CloudFront) which is configured to respond to a number of CNAMEs and use our SSL wildcard certificate for these hostnames. ...
1
vote
1answer
322 views

Apache2/Ubuntu 14.04 error.log Hostname provided via SNI and hostname provided via HTTP are different

In my apache2 error.log I see every few minutes an error message “Hostname … provided via SNI and hostname www.google.com.hk provided via HTTP are different”. In the access.log each error can be often ...
0
votes
1answer
202 views

Nginx Vhosts with SSL

I have 3 domains running on an nginx server with ssl domain.pw domain.info domain.mobi i have sni enabled, and am using a vhost for each site. the host records for the site are all like this A ...
0
votes
1answer
351 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
0
votes
1answer
188 views

Apache2 crashes with Firefox on SSL requests and works fine with IE

We have a server with multiple SSL-enabled vhosts, certificate is the same for all of them. SNI does not seem to be enabled. When I try to open any url (even the one which is supposed to throw 404 ...
0
votes
1answer
465 views

is a wildcard SSL the only option in this multiple VHOST/1IP setup?

I have a web app set up that needs the following SSL encryption: secure.myapp.com -> SSL www.myapp.com/login -> SSL www.myapp.com/signup -> SSL If I'm correct, I could run one SSL ...
2
votes
0answers
427 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
1
vote
0answers
40 views

Use postfix through a proxy. How should it be configured?

Postfix by default uses ports 25, 465 and 587. In my configuration, I enabled TLS encryption using the option smtpd_use_tls=yes in postfix's main.cf. This makes all smtp communications encrypted as ...
1
vote
0answers
14 views

stunnel does not handle SNI correctly

I am trying to get stunnel-4.53-1.1 in Debian Wheezy running. The important parts of my configuration (/etc/stunnel/stunnel.conf) look like that: [https] cert = /etc/ssl/certs/mydomain.pem key = ...
1
vote
0answers
89 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
0answers
237 views

Apache2 conditional section based on port

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port. In short, this ...
0
votes
0answers
35 views

Can NGINX inspect the TLS request to look for SNI like HAProxy (etc) does?

It seems that, when configuring HAProxy for hostname routing on HTTPS connections, it is crucial to include a tcp-request inspect-delay directive to "give HAProxy a chance to look into the ...
0
votes
0answers
33 views

Azure Web App Service - Installed SSLcert from SSLs.com OK, but nothing works

I successfully deployed my .net webapplication to Azure App Services (WebApp), access to http ://mywebappAAA.azurewebsites.net and https ://mywebappAAA.azurewebsites.net are working properly. I ...
0
votes
0answers
18 views

IIS 8 - Default SSL Site Breaks SNI

We have the following scenario in testing SNI on Windows Server 2012 R2 with IIS 8. Domain names and IP addresses listed below are fake and for example only. WEB SITE NAME IP ADDRESS Host ...
0
votes
0answers
58 views

Multiple ssl certificates in IIS without SNI

We are hosting a service on https and have 2 certificates CN=server.internalDns.domain.com CN=server.externalDns.domain.com We would like to generate multiple bindings on the default web site ...
0
votes
0answers
24 views

HTTPS requests to an SNI hosted site not loading non-ssl resources

I've got a site we just moved to SSL using SNI and have some odd behavior going on. If you make a browser request VIA HTTPS - the browser will not load all the resources, external fonts, css and js ...
0
votes
0answers
109 views

SSL with Virtual Hosts Using SNI (multiple name based configs) - Need to get working with client certificate

I have the following configuration along with other name based virtual hosts. All others work fine but this one fails when enabling certificate authentication with the following error: Non-default ...
0
votes
0answers
211 views

How to enable SNI with Apache in Redhat 5.11

I am on redhat 5.11. I want to enable SNI with apache, but I only have Apache/2.2.3 + OpenSSL 0.9.8e-fips-rhel5. I am in a very similar situation like this ...
0
votes
0answers
229 views

How to configure HAProxy to use SNI for SSL enabled backends?

I have several backend web servers that have multiple vhosts and I want to use HAProxy in front of them. It doesn't appear that HAProxy is sending the hostname in the TLS connection to the backend ...
0
votes
0answers
117 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
0answers
1k views

Apache mod_proxy with HTTPS without key material (using SNI)

I would like to have an Apache 2.4 proxy which redirects port 80 and 443 requests to different machines in the local network, depending on the host name. I used mod_proxy and it works fine with port ...