💾 Archived View for bbs.geminispace.org › u › gemalaya › 5600 captured on 2023-11-14 at 10:03:22. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2023-11-04)

➡️ Next capture (2023-12-28)

🚧 View Differences

-=-=-=-=-=-=-

Comment by 😺 gemalaya

Re: "SNI for misfin: I am getting a "you didn't provide SNI"..."

In: s/misfin

@clseibold So yeah, right now, the hostname value that you pass when you create the certificate is the hostname that misfin will bind the socket to.

But note that you can also pass an IP address, i just did that and it works

misfin make-cert ip "IP" 192.168.1.28 28.pem
misfin receive-as 28.pem 
Receiving for: IP (ip@192.168.1.28)                     
Listening on: 192.168.1.28

😺 gemalaya

Sep 26 · 7 weeks ago

2 Later Comments ↓

🚀 clseibold · Sep 26 at 19:42:

@gemalaya Yes, it works, but now your certificate is incorrect. Your certificate has to be your domain name. Also, the bind address is what you want to listen on. I'm actually unsure if it needs to be the public IP, or the private IP of the computer (I think the private IP of the computer will work, actually).

Regardless, the cert has to be the domain name or every other server you send mail to will end up failing the verification.

😺 gemalaya · Sep 26 at 20:13:

@clseibold You're right. I'm working on a service command that will let you serve multiple identities and store messages, it's not too much work.

Original Post

🌒 s/misfin

SNI for misfin: I am getting a "you didn't provide SNI" error in one misfin server when I try to access it via the Python client, apparently that uses a different ssl library. I wonder if that is intended, to work it has to be active in both the client and the server

💬 alexlehm · 20 comments · Sep 26 · 7 weeks ago