RE: ssl branch compile problems

From: Robert Collins <robert.collins@dont-contact.us>
Date: Mon, 12 Feb 2001 09:51:19 +1100

> -----Original Message-----
> From: Henrik Nordstrom [mailto:hno@hem.passagen.se]
> Sent: Monday, 12 February 2001 9:40 AM
> To: Henk-Jan Kloosterman
> Cc: squid-dev@squid-cache.org
> Subject: Re: ssl branch compile problems
>
>
> Henk-Jan Kloosterman wrote:
>
> > As you stated: a key is for a certain host/domain name:
> >
> > Q: What if I want to accelerate multiple hosts?
>
> That would be a todo for the code, to support one key per https_port.
>
<snip>
>
> Note: Due to the way SSL works, only one visible
> certificate/domain can
> be supported per ip:port. The SSL handshake is taking place
> before it is
> known which domainname the user has requested.

So do most server farms use one SSL certificate per host, rather than
signing per domain?
Received on Sun Feb 11 2001 - 15:56:18 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:13:30 MST