Mercurial > hg > nginx-site

comparison xml/en/docs/http/configuring_https_servers.xml @ 2040:093855e77388

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Updated info about SNI.
author Yaroslav Zhuravlev <yar@nginx.com>
date Thu, 07 Sep 2017 17:13:47 +0300
parents 40e461a34187
children aac9e462320b
comparison
equal deleted inserted replaced
2039:d2969b2f69ae 2040:093855e77388
6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> 6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd">
7 7
8 <article name="Configuring HTTPS servers" 8 <article name="Configuring HTTPS servers"
9 link="/en/docs/http/configuring_https_servers.html" 9 link="/en/docs/http/configuring_https_servers.html"
10 lang="en" 10 lang="en"
11 rev="11" 11 rev="12"
12 author="Igor Sysoev" 12 author="Igor Sysoev"
13 editor="Brian Mercer"> 13 editor="Brian Mercer">
14 14
15 <section> 15 <section>
16 16
362 <link url="http://en.wikipedia.org/wiki/Server_Name_Indication">TLS 362 <link url="http://en.wikipedia.org/wiki/Server_Name_Indication">TLS
363 Server Name Indication extension</link> (SNI, RFC 6066), 363 Server Name Indication extension</link> (SNI, RFC 6066),
364 which allows a browser to pass a requested server name during the SSL handshake 364 which allows a browser to pass a requested server name during the SSL handshake
365 and, therefore, the server will know which certificate it should use 365 and, therefore, the server will know which certificate it should use
366 for the connection. 366 for the connection.
367 However, SNI has limited browser support. 367 SNI is currently
368 Currently it is supported starting with the following browsers versions: 368 <link url="http://en.wikipedia.org/wiki/Server_Name_Indication#Support">supported</link>
369 </para> 369 by most modern browsers, though may not be used by some old or special clients.
370
371 <para>
372 <list type="bullet">
373
374 <listitem>
375 Opera 8.0;
376 </listitem>
377
378 <listitem>
379 MSIE 7.0 (but only on Windows Vista or higher);
380 </listitem>
381
382 <listitem>
383 Firefox 2.0 and other browsers using Mozilla Platform rv:1.8.1;
384 </listitem>
385
386 <listitem>
387 Safari 3.2.1 (Windows version supports SNI on Vista or higher);
388 </listitem>
389
390 <listitem>
391 and Chrome (Windows version supports SNI on Vista or higher, too).
392 </listitem>
393
394 </list>
395 <note> 370 <note>
396 Only domain names can be passed in SNI, 371 Only domain names can be passed in SNI,
397 however some browsers may erroneously pass an IP address of the server 372 however some browsers may erroneously pass an IP address of the server
398 as its name if a request includes literal IP address. 373 as its name if a request includes literal IP address.
399 One should not rely on this. 374 One should not rely on this.