Hello!

On Wed, Nov 10, 2010 at 06:33:57AM -0500, Merlin Meyer-Mitchell wrote:

> On page
>
> http://nginx.org/en/docs/http/configuring_https_servers.html
>
> It clearly should say "Since OpenSSL 0.9.8j this option..." or
> perhaps "...supports SNI since 0.8.9f version...".  As is
> it's logically inconsistent.  See extract:
>
> "
> In order to use SNI in nginx, it must be supported in both the
> OpenSSL library with which the nginx binary has been built as
> well as the library to which it is being dynamically linked at
> run time. OpenSSL supports SNI since 0.9.8f version if it was
> built with config option “--enable-tlsext”. Since OpenSSL 0.8.9j
> this option is enabled by default. If nginx was built with SNI
> support, then nginx will show this when run with the “-V”
> switch:
> "

While I'm not a native speaker, this text looks ok for me (though
contains typo: "0.8.9j" should say "0.9.8j").

What it tries to say is: for SNI you have to use OpenSSL 0.9.8f+
built with TLSEXT support. This requires explicitly specified
option before 0.9.8j.

Maxim Dounin

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx