SSL Questions

[Igor Sysoev]

On Wed, Feb 18, 2009 at 06:57:37AM +0000, Alan Williamson wrote:

> Good day one and all.   I would like to ask some specific SSL questions that
> I am sure will be easy enough.
> SSL has the requirement that only certificate can be loaded per IP address.
> 
> With that in mind can nginx handle hosting multiple virtual host SSL sites
> all listening to on IP's?

nginx can, but browsers would certainly not like this.

There is some workarounds, however:

http://wiki.cacert.org/wiki/VhostTaskForce
http://en.wikipedia.org/wiki/Server_Name_Indication

> And can I accept a "https://myhost.com/" and then load balance (proxy) that
> internally to normal "http://" backends?

Yes.


-- 
Igor Sysoev
http://sysoev.ru/en/