SNI support in SSL?

Tomasz Chmielewski tch at virtall.com
Thu Jul 3 07:08:38 EDT 2014


I mean binding it to one IP, but being able to serve different SSL 
certificates.

I think with Cyrus, one needs Subject Alternative Names (SANs) 
certificate for that.


-- 
Tomasz Chmielewski
http://www.sslrack.com

On 2014-07-03 12:50, Niels dettenbach wrote:
> Am 03.07.2014 12:36, schrieb Tomasz Chmielewski:
>> However, I don't see a way to set Cyrus to listen on one IP
> 
> Binding cyrus daemons to specific IPs is possible (and even multiple
> IPs) within cyrus.conf:
> 
> i.e. for IMAPs:
> 
> one IP:
> 
>   imaps         cmd="imapd -s" listen="my.host.ip:imaps" prefork=1 
> maxchild=123
> 
> ALL IPs:
> 
>   imaps         cmd="imapd -s" listen="imaps" prefork=1 maxchild=123
> 
> or just multiple IPs (from brain, so pls doublecheck it):
> 
>   imaps         cmd="imapd -s" listen="my.host.ip1:imaps" prefork=1 
> maxchild=123
>   imaps         cmd="imapd -s" listen="my.host.ip2:imaps" prefork=1 
> maxchild=123
> 
> 
> or do you mean anything other?
> 
> 
> hth a little,
> 
> cheerioh,
> 
> 
> Niels.
> 
> 
> 
> ---
> Niels Dettenbach
> Syndicat IT&Internet
> http://www.syndicat.com


More information about the Info-cyrus mailing list