| commit | b6672b547ad6cc1c8329bece62e9d99df28d1b46 | [log] [tgz] |
|---|---|---|
| author | Willy Tarreau <w@1wt.eu> | Mon Dec 12 17:23:41 2011 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Mon Dec 12 17:26:23 2011 +0100 |
| tree | 406382e907d971f880af6585099d1a698a460366 | |
| parent | 82a04566ecbb3e8e01b657240d5031e5faa1310e [diff] |
MINOR: acl: add support for TLS server name matching using SNI Server Name Indication (SNI) is a TLS extension which makes a client present the name of the server it is connecting to in the client hello. It allows a transparent proxy to take a decision based on the beginning of an SSL/TLS stream without deciphering it. The new ACL "req_ssl_sni" matches the name extracted from the TLS handshake against a list of names which may be loaded from a file if needed.