Re: SSL and reverse proxy and multiple certificates/domains

[Pete Helgren <pete@xxxxxxxxxx>]

Yeah...I saw SNI referred to in many "generic" Apache posts but I 
couldn't find documentation about it for IHS for IBM i.  *Just* found 
the 7.2 HTTP Server for IBM i  Redbook so I'll peruse that and it does 
specifically state:

Server Name Indication(SNI) is an extension to the SSL and TLS protocols 
that indicates what hostname
the client is attempting to connect to at the start of the handshaking 
process. This allows a server to
present multiple certificates on the same IP address and port number and 
hence allows multiple secure
(HTTPS) websites to be served off the same IP address without requiring 
all those sites to use the same
certificate. It is the conceptual equivalent to HTTP/1.1 virtual hosting 
for HTTPS.

I hope there is a *good* example of a working configuration......

Once done, if done, I'll post up the working config so you won't have to 
experiment as much as I have....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
Twitter - Sys_i_Geek  IBM_i_Geek

On 8/31/2018 9:59 AM, Bradley Stone wrote:
> I've tried this in the past without luck.  But that was before the apache
> server was able to use SNI.  I haven't tried since as I want my sites to be
> up.  Maybe one weekend I'll give it another shot.:)
>
> SNI -https://www.fieldexit.com/forum/display?threadid=439
>
>
> Bradley V. Stone
> www.bvstools.com
> MAILTOOL Benefit #5<https://www.bvstools.com/mailtool.html>: Easy setup!
> No confusing or obscure setup instructions, directory entries, SMTP users,
> aliases or host tables. All you need is TCPIP, a connection to the internet
> and you're done!