mdounin at mdounin.ru
Wed Nov 10 15:26:41 MSK 2010
On Wed, Nov 10, 2010 at 02:42:41PM +0300, Igor Sysoev wrote:
> On Wed, Nov 10, 2010 at 06:33:57AM -0500, Merlin Meyer-Mitchell wrote:
> > On page
> > http://nginx.org/en/docs/http/configuring_https_servers.html
> > It clearly should say "Since OpenSSL 0.9.8j this option..." or perhaps "...supports SNI since 0.8.9f version...". As is it's logically inconsistent. See extract:
> > "
> > In order to use SNI in nginx, it must be supported in both the OpenSSL library with which the nginx binary has been built as well as the library to which it is being dynamically linked at run time. OpenSSL supports SNI since 0.9.8f version if it was built with config option “--enable-tlsext”. Since OpenSSL 0.8.9j this option is enabled by default. If nginx was built with SNI support, then nginx will show this when run with the “-V” switch:
> > "
> OpenSSL supports SNI starting with 0.9.8f version. Nowever, you have to
> enable this capability during OpenSSL building using the option
> "--enable-tlsext". Since OpenSSL 0.8.9j this option is enabled by default.
> Is this better ?
More information about the nginx