0006456: add openssl SNI support for host-alias-regexp or host-alias

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006456

[Resin]

minor

always

12-17-21 16:05

Reporter

nam

View Status

public

Assigned To

Priority

normal

Resolution

open

Platform

Status

new

Projection

none

OS Version

ETA

none

Fixed in Version

Product Version

4.0.66

Product Build

Summary

0006456: add openssl SNI support for host-alias-regexp or host-alias

Description

(rep by B. Tech)

Is there another way to cover multiple/all sub-domains that use the same wildcard SSL certificate without having to create a separate host ID entry for each?

<openssl>
    <protocol>...</protocol>
    <cipher-suite>...</cipher-suite>
    <honor-cipher-order>true</honor-cipher-order>
    <certificate-file>domain1.com.crt</certificate-file>
    <certificate-key-file>domain1.com.key</certificate-key-file>
    <certificate-chain-file>domain1.com_chain.crt</certificate-chain-file>

    
    <host id="domain2.com">

      <host-alias-regexp>.*domain2.com</host-alias-regexp>
      - OR -
      <host-alias>site1.domain2.com</host-alias>

      <certificate-file>domain2.com.crt</certificate-file>
      <certificate-key-file>domain2.com.key</certificate-key-file>
      <certificate-chain-file>domain2.com_chain.crt</certificate-chain-file>
    </host>
</openssl>

Steps To Reproduce

Additional Information

Attached Files

Relationships

There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
12-17-21 16:05	nam	New Issue

Mantis 1.0.0rc3[^]

26 total queries executed.
24 unique queries executed.