>> (By the way, httpd(8) doesn't support SNI yet--what do you use a >> web server? I found that apache2's chroot and https combo didn't >> pass the "can I set this up in less than five minutes" sniff >> test--I ended up using nginx.) > > OpenBSD httpd :) If you need to serve more than one website over > HTTPS without SNI, just add the extra domains into the main > certificate SAN.
Marco, Great! I didn't think that was possible---I always thought SAN was used exclusively for subdomain type things like foo.example.com and moo.example.com in lieu of wildcards. I'll look into this--no more nginx! Best, Kristaps