Multiple HTTPS sites on single IP

[Blondak]

Hi,
have a question has anybody how browsers supports RFC RFC 2782? because if this RFC is supported we can provide HTTPS for multiple domains on single IP without any problems just with few DNS entries

_https._tcp.domain.com. SRV 10 1 1443 domain.com.

this will cause that https://domain.com will connect to port 1443 for domain.com not default 443, and for every domain we want we can provide https on different domain.

What do you think about this idea?

[Freakez]

Use mod_gnutls:

Code:

http://isp-control.net/documentation/howto:multiple_ssl_certificates_on_a_single_ip_port_using_mod_gnutls

[Blondak]

(07-15-2010 11:46 PM)Freakez Wrote:  Use mod_gnutls:

a know about mod_gnutls, but it require SNI support for browsers, look into unsupported browsers.

[kassah]

Upon a quick google search, this looks unsupported in Firefox and Google Chrome, which also probably means Safari doesn't support it as well.

Related bugs are:
Mozilla Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=14328
Google Chrome: http://code.google.com/p/chromium/issues...l?id=22423

If RFC 2782 is supported by IE6 and IE7+ on WinXP, then combined with SNI it might be a workable solution, given that between them it would cover all major browsers in use.

Edit: Confirmed, Safari and pretty much every webkit browser I could find doesn't support it.