comparison xml/en/docs/http/configuring_https_servers.xml @ 658:bd81a71006fe

Documented that most browsers won't pass an IP address as a server name in an SNI during SSL handshake.
author Ruslan Ermilov <ru@nginx.com>
date Tue, 28 Aug 2012 09:15:17 +0000
parents 130fad6dc1b4
children 77a3314c74a7
comparison
equal deleted inserted replaced
657:56fa3cab4ceb 658:bd81a71006fe
6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> 6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd">
7 7
8 <article name="Configuring HTTPS servers" 8 <article name="Configuring HTTPS servers"
9 link="/en/docs/http/configuring_https_servers.html" 9 link="/en/docs/http/configuring_https_servers.html"
10 lang="en" 10 lang="en"
11 rev="1" 11 rev="2"
12 author="Igor Sysoev" 12 author="Igor Sysoev"
13 editor="Brian Mercer"> 13 editor="Brian Mercer">
14 14
15 <section> 15 <section>
16 16
375 for the connection. 375 for the connection.
376 However, SNI has limited browser support. 376 However, SNI has limited browser support.
377 Currently it is supported starting with the following browsers versions: 377 Currently it is supported starting with the following browsers versions:
378 </para> 378 </para>
379 379
380 <para>
380 <list type="bullet"> 381 <list type="bullet">
381 382
382 <listitem> 383 <listitem>
383 Opera 8.0; 384 Opera 8.0;
384 </listitem> 385 </listitem>
398 <listitem> 399 <listitem>
399 and Chrome (Windows version supports SNI on Vista or higher, too). 400 and Chrome (Windows version supports SNI on Vista or higher, too).
400 </listitem> 401 </listitem>
401 402
402 </list> 403 </list>
404 <note>
405 If a server is accessed by an IP address, most browsers will
406 not pass it as a server name during the SSL handshake.
407 </note>
408 </para>
403 409
404 <para> 410 <para>
405 In order to use SNI in nginx, it must be supported in both the 411 In order to use SNI in nginx, it must be supported in both the
406 OpenSSL library with which the nginx binary has been built as well as 412 OpenSSL library with which the nginx binary has been built as well as
407 the library to which it is being dynamically linked at run time. 413 the library to which it is being dynamically linked at run time.