💾 Archived View for bbs.geminispace.org › u › skyjake › 19205 captured on 2024-08-31 at 15:45:45. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
Re: "Separate certificates for virtual hosts"
Implemented for v0.9.1. The way this works is that you first create separate SSL contexts for each virtual host. Then you can set up a callback to select the context for a particular incoming connection based on the SNI servername.
Aug 25 · 7 days ago
Each virtual host should be able to use its own certificate. Currently, only one certificate is used and it must have alternative names for each vhost. I'm not sure if this requires more than loading multiple server certificates at launch, i.e., whether pyOpenSSL checks the SNI info automatically or does the handshake need to be handled more manually. Some research needed...
💬 skyjake [mod...] · 1 comment · 2023-07-19 · 1 year ago · ✔︎ #feature