Re: Support for TLS server_name extension (aka SNI=server name indication)
lyrawilliams1985--- via sr-users <[email protected]>
| Newsgroups | gmane.comp.voip.ser |
|---|---|
| Message-ID | <[email protected]> |
SNI (Server Name Indication) support was introduced in Kamailio 1.5, but it was limited to detecting the server name during the TLS handshake, not for selecting multiple certificates. That’s why options like tls_server_name or server_name are not valid in tls.cfg. Current Kamailio versions rely on the underlying OpenSSL library, and full SNI-based certificate selection has not been implemented in native Kamailio config. So yes, SNI is recognized, but you can’t configure multiple certs directly through tls.cfg. I found one helpful resource article at:- https://cheapsslweb.com/blog/what-is-server-name-indication-sni-difference-between-sni-and-san/. Hope it helps! __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender!