Re: [Proftpd-user] ProFTPd and SNI
Felipe Gasper <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
> On Apr 4, 2017, at 10:33 AM, TJ Saunders <[email protected]> wrote: > > >> Am I correct in thinking that ProFTPd has tied its SNI support to virtual hosting, >> rather than the Dovecot/Exim approach of simply allowing a name-based lookup of hostname >> to certificate? > > How do you mean? Are you asking what the relationship is, in ProFTPD, > between SNI and the HOST command? Or how ProFTPD validates any SNI? Or > something else? > I’m just learning how ProFTPd does SNI and was hoping I could just do: TLSRSACertificateFile /var/ssl/%{env:TLS_SERVER_NAME}/combined (… given that my server’s SSL certs are in such a filesystem structure) This is how Exim’s SNI support works, and it’s beautiful. :) mod_tls, though, doesn’t seem to parse such environment variables? On a server that hosts thousands of domains, I’d really rather not have to create a separate FTP vhost for each domain that maintains TLS on the machine … but it looks like that’s how ProFTPd expects me to do it? -FG ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html