proxy_pass not seen as SNI-client according to Apache directive

Robert Paprocki rpaprocki at
Sun Feb 14 21:46:48 UTC 2016

> On Feb 14, 2016, at 12:58, Maxim Dounin <mdounin at> wrote:
> Hello!
>> On Sun, Feb 14, 2016 at 08:14:20PM +0100, Lucas Rolff wrote:
>> I'm having a rather odd behavior - I use nginx as a reverse proxy (basically
>> as a CDN) - where if the file isn't in cache, I do use proxy_pass to the
>> origin server, to get the file and then cache it.
>> This works perfectly in most cases, but if the origin is running apache and
>> happen to use the Apache Directive "SSLStrictSNIVHostCheck" where it's set
>> to On.

Out of curiosity, is there a philosophical/design reason this option is not enabled by default?

More information about the nginx mailing list