Hello,OK, I have this working on FF. But I would like to now add an entry in the conf file for users who's browsers do not support SNI and was wondering how to generate this message?
As per how-to "..If a user's browser does not support SNI then the first SSL site in the configuration file will be displayed. It is recommended that the first entry is to a page that informs the user what the server requires for use."
On Safari, I get the root certificate of the server and a warning that this was signed by an untrusted authority.
Similarly on Mozilla 1.7.12 and Netscape.As my application is running on Zope and I have a rewrite rule what will be the best way to do this? The zope https server is on 7433 and I only have one zope instance.
So I guess I will have the same problem.For now, the next step is to figure out how to generate the message if the client does not support SNI.
Any thoughts on this. Many thanks Norman Eric Covener wrote:
On Feb 17, 2008 8:37 AM, Norman Khine <norman@xxxxxxxxx> wrote:Hello, I have some virtual hosts and would like to run SSL with different certificates on each. Having followed the following how-to, http://gentoo-wiki.com/HOWTO_Apache_with_Name_Based_Hosting_and_SSL and rebuilding apache with SNI support, I am having some issues in that domain2.com only returns the server.crt and not the one specified in my rule.Your subject says 2.2.8; It doens't look like 2.2.8 has SNI support.
%>>> "".join( [ {'*':'@','^':'.'}.get(c,None) or chr(97+(ord(c)-83)%26) for c in ",adym,*)&uzq^zqf" ] )
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|