Repository navigation
TLS SNI broken with nginx on 2017Q4 #95
Description
This affects both nginx 1.12.2 and 1.13.7. This does not affect Apache.
When visiting a server properly configured with SNI, only one server stanza is used. The certificate and content served for all SSL sites are from the first SSL enabled host.
Metadata
Metadata
Assignees
Labels
No labels
Activity
bahamat commentedon Apr 10, 2018
This was on a SmartOS base-64-lts@17.4.0 image.
nbxorg commentedon Apr 10, 2018
nginx 1.13.3 on SmartOS minimal-64-lts@16.4.1 seems to work ok.
mamash commentedon Apr 11, 2018
Brian, works for me with 1.13.7 on a base-lts-17.4.0 VM. Can you share your config bits?
bahamat commentedon Apr 11, 2018
Actually, looking at my config again I did have an error on the
server_namethat was the problem. Fixing that did resolve it, so this isn't an issue after all.nbxorg commentedon Apr 11, 2018
Same for me. In the template I was basing my configs off of there was a semi-colon missing from the index statement just before the
server_name...I'm increasingly catching my brain seeing punctuation that isn't really there.
gallery-dl: Update net/gallery-dl to 1.5.0
Update to 1.71.0
gdk-pixbuf2: Update to 2.38.2
gdk-pixbuf2: Update to 2.38.2
bibletime: Upgrade to 2.11.2
gdk-pixbuf2*: update to 2.40.0
lang/pear: update to 1.10.10
libsixel: update to 1.8.3. (security fixes)
113 remaining items
devel/serie: update to 0.5.1
py-nh3: update to 0.3.2.
editors/reovim: update to 0.8.1
graphics/ruby-color: update to 2.1.2
openttd-data: Update to 8.0
sysutils/pv: Update to 1.10.3
sysutils/pv: Update to 1.10.3
time/ruby-hitimes: update to 3.2.0
www/ruby-cgi: update to 0.5.2
Update to 0.41
pdsh: Update to 2.36
misc/rozi: update to 0.0.29
textproc/treemd: update to 0.10.0
misc/rozi: update to 0.0.29
textproc/treemd: update to 0.10.0