Multiple Server names with own TLS Certs (SNI) for virtual domains?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I would like to find TLS SNI (RFC 6066) integrated in Cyrus-IMAPd

As a small ISP i need to serve several virtual domains on my Cyrus-IMAPd 3.0 installation.

Example:
The clients should be able to use either
    mail.company1.com
    mail.company2.net
as server names with STARTTLS and SSL connections.

To make clear and avoid the ten years old discussions:
* "Multiple IP" or "Multiple Port" solutions seems not useful for an easy configuration of independend customers
* "One certificate with multiple domains" (SAN ) seems not useful for independent customers

I would like to find TLS SNI (RFC 6066) integrated in Cyrus-IMAPd

SNI is mentioned in the 3.0.10 "cyrus-imapd/imap/tls.c" source code but i have no idea how to use it.

I need at least a possibility to configure more than one crt/key-file-pair
depending on the sent server name within a single service.

BTW: TLS/SNI is integrated in Postfix since Postfix 3.4

Best regards
Carsten Jenner











[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]
  Powered by Linux