Sorry for not being specific in #1567. I had to clarify that I was talking about server role only.

From what I understood server role configurations can be distinguish one from another only by socket, provided in their configuration. TLS module documentation says:

"... different TLS parameters can be specified on a per role (server or client) and domain basis (for now only IPs)".

Which hints that additional tests for matching incoming connections against configured server profiles were in mind. I would like to request a feature which could allow matching them against domain name if that's possible.

One of the options may be checking client's certificate CN if require_certificate parameter is set to yes.

Thank you!


You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.