AW: AW: AW: AW: SNI and certs.

Lukas Tribus luky-37 at hotmail.com
Tue Nov 29 22:26:24 UTC 2016


> Why should I? I clearly defined the problem/misconfiguration. I don't 
> really see the need to justify why I want to fix it.

To help others, myself included to comprehend a possible problem in similar
configurations and learn more about it. After all, this is a community.



> Well, you told me it doesn't happen... WTF?

I said I doubt it, and asked for more details. Not sure why that would offend
you.



> And what cert would you use in this default block that matches, so the 
> crawler receives a meaningful response, rather than an incorrect cert ( 
> which they don't like )?

Obviously there is no correct/matching certificate for this domain name
in the first place, otherwise we wouldn't be in this situation.

As I said, the best way would be to drop the TLS handshake, but nginx
doesn't support this afaik.


Lukas


More information about the nginx mailing list