Re: Multiple HTTPS sites on one IP address, was: Re: [CentOS] Self-signed certificates

I'd like to see server and browsers supporting RFC 2817 also, but I seem to rememeber that when it was raised on Mozilla's bugzilla there wasn't much support for it... and there are issues with is, see discussion of it on the Apache site [1]:

• Upgrading to TLS Within HTTP/1.1 http://www.ietf.org/rfc/rfc2817.txt

There is mod_gnutls for apache from the folks at outoforder.cc, http://www.outoforder.cc/projects/apache/mod_gnutls/ but it's reasonably new and not quite ready for production yet. It will not play nicely with mod_ssl, so it's an either or type deal. They have a number of other excellent apache modules there, my personal favorite being mod_log_sql. Anyway, enough plugging them.

-- Jim Perrin System Architect - UIT Ft Gordon & US Army Signal Center