Mercurial > hg > nginx-site
comparison xml/en/docs/http/configuring_https_servers.xml @ 658:bd81a71006fe
Documented that most browsers won't pass an IP address
as a server name in an SNI during SSL handshake.
author | Ruslan Ermilov <ru@nginx.com> |
---|---|
date | Tue, 28 Aug 2012 09:15:17 +0000 |
parents | 130fad6dc1b4 |
children | 77a3314c74a7 |
comparison
equal
deleted
inserted
replaced
657:56fa3cab4ceb | 658:bd81a71006fe |
---|---|
6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> | 6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> |
7 | 7 |
8 <article name="Configuring HTTPS servers" | 8 <article name="Configuring HTTPS servers" |
9 link="/en/docs/http/configuring_https_servers.html" | 9 link="/en/docs/http/configuring_https_servers.html" |
10 lang="en" | 10 lang="en" |
11 rev="1" | 11 rev="2" |
12 author="Igor Sysoev" | 12 author="Igor Sysoev" |
13 editor="Brian Mercer"> | 13 editor="Brian Mercer"> |
14 | 14 |
15 <section> | 15 <section> |
16 | 16 |
375 for the connection. | 375 for the connection. |
376 However, SNI has limited browser support. | 376 However, SNI has limited browser support. |
377 Currently it is supported starting with the following browsers versions: | 377 Currently it is supported starting with the following browsers versions: |
378 </para> | 378 </para> |
379 | 379 |
380 <para> | |
380 <list type="bullet"> | 381 <list type="bullet"> |
381 | 382 |
382 <listitem> | 383 <listitem> |
383 Opera 8.0; | 384 Opera 8.0; |
384 </listitem> | 385 </listitem> |
398 <listitem> | 399 <listitem> |
399 and Chrome (Windows version supports SNI on Vista or higher, too). | 400 and Chrome (Windows version supports SNI on Vista or higher, too). |
400 </listitem> | 401 </listitem> |
401 | 402 |
402 </list> | 403 </list> |
404 <note> | |
405 If a server is accessed by an IP address, most browsers will | |
406 not pass it as a server name during the SSL handshake. | |
407 </note> | |
408 </para> | |
403 | 409 |
404 <para> | 410 <para> |
405 In order to use SNI in nginx, it must be supported in both the | 411 In order to use SNI in nginx, it must be supported in both the |
406 OpenSSL library with which the nginx binary has been built as well as | 412 OpenSSL library with which the nginx binary has been built as well as |
407 the library to which it is being dynamically linked at run time. | 413 the library to which it is being dynamically linked at run time. |