<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div dir="auto">
<div dir="auto">If you only have one IP, then you cannot fix this. SNI is what determines which certificate to serve for the request. The only solution would be individual IPs for each domain, thus not needing SNI to get the correct cert for each domain.</div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div id="x_composer_signature" dir="auto">
<div dir="auto" style="font-size:12px; color:#575757">Sent from my Galaxy</div>
</div>
<div dir="auto"><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>-------- Original message --------</div>
<div>From: Saint Michael <venefax@gmail.com> </div>
<div>Date: 3/11/24 02:34 (GMT-05:00) </div>
<div>To: nginx@nginx.org </div>
<div>Subject: No SNI support on multisite installation </div>
<div><br>
</div>
</div>
<font size="2"><span style="font-size:11pt;">
<div class="PlainText">I have an openresty server, latest, compiled with http_ssl. So I have<br>
5 websites on the same IP, each one with a server block, a listen<br>
statement XXXX:443 SSL; and its own server_name but when I test any of<br>
the certificates (example https:// 3y3. us), the online analyzer<br>
<a href="https://www.ssllabs.com/ssltest/">https://www.ssllabs.com/ssltest/</a> says that there is no SNI support,<br>
"This site works only in browsers with SNI support."<br>
" Certificate #2: RSA 2048 bits (SHA256withRSA) No SNI<br>
Server Key and Certificate #1<br>
Subjectssnode1.minixel.com<br>
Fingerprint SHA256:<br>
2c43df752c9f32a0b9072c9918c7f4064f215a75f321a3eed54f3ea53d377291<br>
Pin SHA256: 0EYY9GZfp68L6vPN7Y0wSjXldFNAUDJBnJ3zFl+KhXs=Common<br>
namesssnode1.minixel.comAlternative namesssnode1.minixel.com<br>
MISMATCH.<br>
Revocation status Good (not revoked)<br>
Trusted No NOT TRUSTED<br>
Mozilla Apple Android Java Windows<br>
<br>
so how do I avoid this issue? Is there anything missing in my<br>
configuration? I need to use the same IP for every website.<br>
_______________________________________________<br>
nginx mailing list<br>
nginx@nginx.org<br>
<a href="https://mailman.nginx.org/mailman/listinfo/nginx">https://mailman.nginx.org/mailman/listinfo/nginx</a><br>
</div>
</span></font>
</body>
</html>