[Modules] Help! SNI doesn't work

list list list99 at gmail.com
Thu Sep 11 15:55:58 EDT 2008


Hello,

I installed mod_gnutls for SNI. But it doesn't work. It always returns
the first certificate defined in the configure file.

I use Apache 2.0.52, with mod_gnutls 0.4.3 compiled against gnutls
2.4.1 on redhat el4. And here is my conf:

LoadModule gnutls_module        modules/mod_gnutls.so

GnuTLSCache dbm "/var/cache/mod_gnutls"
GnuTLSCacheTimeout 500

Listen xxx.xxx.xxx.xxx:443

NameVirtualHost xxx.xxx.xxx.xxx:443

<VirtualHost xxx.xxx.xxx.xxx:443>
    ServerName site1.example.org:443
    DocumentRoot /var/www/v1/Web

    ErrorLog logs/tls_error_log
    TransferLog logs/tls_access_log
    LogLevel warn

    GnuTLSEnable On
    GnuTLSPriorities NORMAL
    GnuTLSKeyFile /path/to/site1.example.org.key
    GnuTLSCertificateFile /path/to/site1.example.org.crt
</VirtualHost>

<VirtualHost xxx.xxx.xxx.xxx:443>
    ServerName site2.example.org:443
    DocumentRoot /var/www/v2/Web

    ErrorLog logs/tls_error_log
    TransferLog logs/tls_access_log
    LogLevel warn

    GnuTLSEnable On
    GnuTLSPriorities NORMAL
    GnuTLSKeyFile /path/to/site2.example.org.key
    GnuTLSCertificateFile /path/to/site2.example.org.crt
</VirtualHost>

Any idea?

Thanks,

Min
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.outoforder.cc/pipermail/modules/attachments/20080911/6b664c32/attachment.html 


More information about the Modules mailing list