Nginx anti-generational, backend one IP binding multiple SSL certificates, resulting in a connection failure resolution: HTTPS and SNI extensions

Source: Internet
Author: User

Default: When the SSL protocol is used for handshake negotiation, the default is not to send the host name, that is, in the form of IP for HTTPS connection handshake negotiation, which leads to a problem, when there are multiple virtual hosts on a server using the same IP,

Nginx will be an error in the Counter-generation!

SNI (server Name Indication): is to solve a server, the same IP, the use of multiple domain name certificates, that is, using SSL to connect to the server, the first to send access to the site domain name, so that the server will return a suitable certificate based on the domain name.

Nginx Open sni:proxy_ssl_server_name on;

Nginx anti-generational, backend one IP binding multiple SSL certificates, resulting in a connection failure resolution: HTTPS and SNI extensions

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.