Re: Supporting multiple certificates

2015-05-28 Thread Christopher Schultz
Mark, On 5/27/15 4:56 AM, Mark Thomas wrote: > On 26/05/2015 08:28, Mark Thomas wrote: >> On 25/05/2015 15:18, Rainer Jung wrote: >> >> >> Mark has been doing a whole lot of work recently to both unify the TLS configuration across all connectors (OpenSSL and JSSE) as well as suppor

Re: Supporting multiple certificates

2015-05-27 Thread Mark Thomas
On 26/05/2015 08:28, Mark Thomas wrote: > On 25/05/2015 15:18, Rainer Jung wrote: > > > >>> Mark has been doing a whole lot of work recently to both unify the TLS >>> configuration across all connectors (OpenSSL and JSSE) as well as >>> support SNI. Since it's all changing, this would be a good

Re: Supporting multiple certificates

2015-05-26 Thread Mark Thomas
On 25/05/2015 15:18, Rainer Jung wrote: >> Mark has been doing a whole lot of work recently to both unify the TLS >> configuration across all connectors (OpenSSL and JSSE) as well as >> support SNI. Since it's all changing, this would be a good time to >> either add some new configuration attrib

Re: Supporting multiple certificates

2015-05-25 Thread Rainer Jung
Hi Chris, Am 25.05.2015 um 14:01 schrieb Christopher Schultz: Rainer, On 5/24/15 2:09 PM, Rainer Jung wrote: mod_ssl supports multiple certificates for the same host, one with RSA key, one with DSA key and one with EC key. They can be configured at the same time. So the connector would be ab

Re: Supporting multiple certificates

2015-05-25 Thread Christopher Schultz
Rainer, On 5/24/15 2:09 PM, Rainer Jung wrote: > mod_ssl supports multiple certificates for the same host, one with RSA > key, one with DSA key and one with EC key. They can be configured at the > same time. So the connector would be able to handshake using any of the 3 different types of certifi

Supporting multiple certificates

2015-05-24 Thread Rainer Jung
mod_ssl supports multiple certificates for the same host, one with RSA key, one with DSA key and one with EC key. They can be configured at the same time. Altough tcnative has the code to handle that, we currently do not wire it. We would need an way to express in the ssl config, that multiple