Mercurial > hg > nginx-site

comparison xml/en/docs/http/configuring_https_servers.xml @ 2061:aac9e462320b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Added note about s_client and SNI (trac #708).
author Yaroslav Zhuravlev <yar@nginx.com>
date Wed, 18 Oct 2017 15:22:04 +0300
parents 093855e77388
children 37e082fd009c
comparison
equal deleted inserted replaced
2060:237b67ef69a6 2061:aac9e462320b
6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> 6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd">
7 7
8 <article name="Configuring HTTPS servers" 8 <article name="Configuring HTTPS servers"
9 link="/en/docs/http/configuring_https_servers.html" 9 link="/en/docs/http/configuring_https_servers.html"
10 lang="en" 10 lang="en"
11 rev="12" 11 rev="13"
12 author="Igor Sysoev" 12 author="Igor Sysoev"
13 editor="Brian Mercer"> 13 editor="Brian Mercer">
14 14
15 <section> 15 <section>
16 16
196 /OU=ValiCert Class 2 Policy Validation Authority 196 /OU=ValiCert Class 2 Policy Validation Authority
197 /CN=http://www.valicert.com//emailAddress=info@valicert.com 197 /CN=http://www.valicert.com//emailAddress=info@valicert.com
198 ... 198 ...
199 </programlisting> 199 </programlisting>
200 200
201 <note>
202 When testing configurations with <link id="sni">SNI</link>,
203 it is important to specify the <literal>-servername</literal> option
204 as <command>openssl</command> does not use SNI by default.
205 </note>
206
201 In this example the subject (“<i>s</i>”) of the 207 In this example the subject (“<i>s</i>”) of the
202 <literal>www.GoDaddy.com</literal> server certificate #0 is signed by an issuer 208 <literal>www.GoDaddy.com</literal> server certificate #0 is signed by an issuer
203 (“<i>i</i>”) which itself is the subject of the certificate #1, 209 (“<i>i</i>”) which itself is the subject of the certificate #1,
204 which is signed by an issuer which itself is the subject of the certificate #2, 210 which is signed by an issuer which itself is the subject of the certificate #2,
205 which signed by the well-known issuer <i>ValiCert, Inc.</i> 211 which signed by the well-known issuer <i>ValiCert, Inc.</i>