search

Eugeny / ajenti-v

Virtual Hosting addon for Ajenti
ajenti.org/#product-ajenti-v
MIT License
225 stars 79 forks source link

Multiple SSL Certificates on vhosts per SNI #142

Open schmijos opened 9 years ago

schmijos commented 9 years ago

I'm using ajenti-v to configure a website accessible over three vhosts. On DNS level they're resolved per CNAME. It seems like it isn't possible to configure multiple SSL certificates if I'm using multiple domains (_servername).

The configuration generated by ajenti-v is the following:

server {
    listen *:443 ssl default_server;
    ssl_certificate /root/ssl/domain.crt;
    ssl_certificate_key /root/ssl/domain.key;
    server_name domain.ch otherdomain.ch www.alsoanotherdomain.ch;
    ...
}

SubjectAltName in one certificate is not possible for me. I'm bound to the three certificates. Do you have an idea what I could do about that? Do I have to overwrite the server section three times in the custom top level configuration. Could you do something about that (maybe supporting a sort of Server Name Indication configuration)?