Multiple Server names with own TLS Cert s (SNI) for virtual domains?
"carsten.jenner via Info" <[email protected]>
| Newsgroups | gmane.mail.imap.cyrus |
|---|---|
| Message-ID | <[email protected]> |
I would like to find TLS SNI (RFC 6066) integrated in Cyrus-IMAPd As a small ISP i need to serve several virtual domains on my Cyrus-IMAPd 3.0 installation. Example: The clients should be able to use either mail.company1.com mail.company2.net as server names with STARTTLS and SSL connections. To make clear and avoid the ten years old discussions: * "Multiple IP" or "Multiple Port" solutions seems not useful for an easy configuration of independend customers * "One certificate with multiple domains" (SAN ) seems not useful for independent customers I would like to find TLS SNI (RFC 6066) integrated in Cyrus-IMAPd SNI is mentioned in the 3.0.10 "cyrus-imapd/imap/tls.c" source code but i have no idea how to use it. I need at least a possibility to configure more than one crt/key-file-pair depending on the sent server name within a single service. BTW: TLS/SNI is integrated in Postfix since Postfix 3.4 Best regards Carsten Jenner ------------------------------------------ Cyrus: Info Permalink: https://cyrus.topicbox.com/groups/info/T7d80e3412a9fd3c8-Mec733aa021f6d8da250856a4 Delivery options: https://cyrus.topicbox.com/groups/info/subscription