Phil Pennock
March 29, 2013 08:14PM
On 2013-03-30 at 02:24 +0400, Valentin V. Bartenev wrote:
> On Saturday 30 March 2013 01:30:21 lblankers wrote:
> > I would like to use nginx 1.2.1 with TLS SNI support to proxy SMTP
> > submission for several different domains over SSL. I would expect that if I
> > configure multiple servers with different server names that a TLS v1 client
> > will select the correct one through SNI. However I always get the first
> > certificate regardless of the hostname specified in ClientHello.
> >
> > Is there something wrong with my config?
> >
>
> The problem is that TLS SNI currently is not supported in mail proxy.

If someone needs TLS SNI with SMTP right now, Exim supports this. It's
not designed to be as scalable as nginx in performance, but it does okay
for most folks' purposes.

(Support added in 4.80, released 2012-05-31; 4.80.1 is current)

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Mail proxy with SNI

lblankers March 29, 2013 05:30PM

Re: Mail proxy with SNI

Valentin V. Bartenev March 29, 2013 06:26PM

Re: Mail proxy with SNI

Phil Pennock March 29, 2013 08:14PM

Re: Mail proxy with SNI

lblankers March 30, 2013 04:33AM

Re: Mail proxy with SNI

Jonathan Matthews March 30, 2013 09:00AM

RE: Mail proxy with SNI

Lukas Tribus March 30, 2013 09:58AM

Re: RE: Mail proxy with SNI

lblankers March 30, 2013 12:05PM

Re: RE: Mail proxy with SNI

salsaj May 15, 2014 11:23AM

Re: RE: Mail proxy with SNI

Maxim Dounin May 15, 2014 12:36PM

Re: Mail proxy with SNI

Sven Köhler November 07, 2014 08:02PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 152
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready