search

hannesm / tlstunnel-lwt

TLS tunnel -- an alternative to stud / stunnel
BSD 2-Clause "Simplified" License
84 stars 7 forks source link

SNI support #9

Open hannesm opened 9 years ago

hannesm commented 9 years ago

given a set of certificates (with disjoint sets of CN/subjAltName) and a set of services, forward depending on SNI to the right host

hannesm commented 9 years ago

stud accepts a set of certificate list * private key and presents the matching certificate depending on SNI. each connection is forwarded to only a single backend server. we could either do the same, or be more fancy (but would decide on a possible configuration for this).