On Sun, Jun 25, 2000, Mads Toftum wrote:
> [SNIP]
> > 2) The keys have to have same password.
>
> There should be no problem using different passwords.
Yes, mod_ssl recognizes this automatically and re-uses the pass-phrase. So
even if one have multiple keys encrypted with the same pass-phrase one only
has to enter the pass-phrase once at startup.
> [SNIP]
> >
> > Some people on this list did experiment with passing the servername during the
> > handshake. I haven't heard anyone reporting success. Anyone?
>
> If I remember it correctly, then there was some talk about extending the TLS
> standard to handle that - but AFAIK nothing like that has happened in openssl.
AFAIK the TLS standard will be not changed for this. But there are drafts (or
are they already final RFCs?) which describe an "upgrade mechanism" for HTTP
connections which allows one to first send a plain HTTP request (including the
Host: field), then perform a step-up to SSL/TLS and then transfer the response
already encrypted. And because here the Host: header is seen before the
SSL/TLS handshake is performed, this implicitly solves the name based virtual
hosting issues.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
