Welcome! Log In Create A New Profile

Advanced

Re: Mail proxy with SNI

March 30, 2013 04:33AM
On March 29, 2013 08:14PM Phil Pennock wrote:
> On 2013-03-30 at 02:24 +0400, Valentin V. Bartenev wrote:
> > On Saturday 30 March 2013 01:30:21 lblankers wrote:
> > > I would like to use nginx 1.2.1 with TLS SNI support to proxy SMTP
> > > submission for several different domains over SSL. I would expect that if I
> > > configure multiple servers with different server names that a TLS v1 client
> > > will select the correct one through SNI. However I always get the first
> > > certificate regardless of the hostname specified in ClientHello.
> > >
> > > Is there something wrong with my config?
> > >
> >
> > The problem is that TLS SNI currently is not supported in mail proxy.
>
> If someone needs TLS SNI with SMTP right now, Exim supports this. It's
> not designed to be as scalable as nginx in performance, but it does okay
> for most folks' purposes.

Thanks for clearing that up. I would prefer to use nginx rather than switch
to Exim because I would like to use nginx to proxy IMAP using SSL SNI
as well. Would it be possible to add SNI to the mail proxy?

I am doing this as a hobby project rather than professionally so getting
multiple IPs in order to host multiple domains is prohibitively expensive.
Both in one time cost (~ € 100) and recurring cost (€ 2.50 / month / IP).
So if someone could suggest a cheaper solution (e.g. sponsoring a
developer to add this feature) I would very much appreciate that.

Laurens
Subject Author Posted

Mail proxy with SNI

lblankers March 29, 2013 05:30PM

Re: Mail proxy with SNI

Valentin V. Bartenev March 29, 2013 06:26PM

Re: Mail proxy with SNI

Phil Pennock March 29, 2013 08:14PM

Re: Mail proxy with SNI

lblankers March 30, 2013 04:33AM

Re: Mail proxy with SNI

Jonathan Matthews March 30, 2013 09:00AM

RE: Mail proxy with SNI

Lukas Tribus March 30, 2013 09:58AM

Re: RE: Mail proxy with SNI

lblankers March 30, 2013 12:05PM

Re: RE: Mail proxy with SNI

salsaj May 15, 2014 11:23AM

Re: RE: Mail proxy with SNI

Maxim Dounin May 15, 2014 12:36PM

Re: Mail proxy with SNI

Sven Köhler November 07, 2014 08:02PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 136
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready