Re: [naviserver-devel] Host based virtual hosts

2020-07-25 Thread Gustaf Neumann
On 08.07.20 17:33, Maksym Zinchenko wrote: Thank you, very much. I'm going to implement it right now. Dear Maksym, server-side SNI should be now fully implemented (including OCSP and SNI, which are technically not SNI related, but required some refactoring due to virtual hosting, which is not

Re: [naviserver-devel] Host based virtual hosts

2020-07-08 Thread Maksym Zinchenko
Thank you, very much. I'm going to implement it right now. On Wed, Jul 8, 2020 at 2:29 PM Gustaf Neumann wrote: > Dear Maksym, > > > So, for the time being, we have no such support in NaviServer. > > With the commit [1], i've added the first draft for server-side SNI > to NaviServer. It is not

Re: [naviserver-devel] Host based virtual hosts

2020-07-08 Thread Gustaf Neumann
Dear Maksym, > So, for the time being, we have no such support in NaviServer. With the commit [1], i've added the first draft for server-side SNI to NaviServer. It is not fully finished, but sufficiently stable (already running onĀ  OpenACS.org) and should provide the basic server-side support to

Re: [naviserver-devel] Host based virtual hosts

2020-07-08 Thread Maksym Zinchenko
OMG, Gustaf you are amazing, I just saw last commit with SNI (Server Name Indication (SNI. Thank you On Sat, Jul 4, 2020 at 7:55 PM Gustaf Neumann wrote: > > On 04.07.20 21:08, Maksym Zinchenko wrote: > > So now im facing this issues: > > 1) Some of the domains are not mine and belong to some cl

Re: [naviserver-devel] Host based virtual hosts

2020-07-04 Thread Gustaf Neumann
On 04.07.20 21:08, Maksym Zinchenko wrote: So now im facing this issues: 1) Some of the domains are not mine and belong to some clients, they might have their own certificates they bought. 2) Also I don't know how many clients I will have in the future, so everytime I add a new domain I need

Re: [naviserver-devel] Host based virtual hosts

2020-07-04 Thread Maksym Zinchenko
Dear Gustaf, my main problem is certificate. Loading the drivers globally works. When I access domains they are pointing and working correctly. The problem is nsssl when loaded globally must have "ns_param certificate", I misunderstood this parameter. I thought its like "ns_param defaultserver", l

Re: [naviserver-devel] Host based virtual hosts

2020-07-04 Thread Gustaf Neumann
Dear Maksym, If you are using virtual host, you should load the drivers globally and - when connect via https - use multi-domain SAN certificates (as produced e.g. by [1]). openacs.org is a configuration using (a) multiple names for the same server (such as .org, .net, with and without "www." pr

[naviserver-devel] Host based virtual hosts

2020-07-04 Thread Maksym Zinchenko
Hello, I'm trying to set up host based virtual hosts with naviserver but I can't understand it easily or correctly. so what i'm trying to accomplish: I have one big dedicated server, and i'm moving all my VPS's to it. So Ive created the main config file /opt/ns/conf/dz_nsd.tcl, subdirectory/opt/ns/