Sorry for not being specific in #1567. I had to clarify that I was talking about server role only.
From what I understood server role configurations can be distinguish one from another only by socket, provided in their configuration. TLS module documentation says:
"... different TLS parameters can be specified on a per role (server or client) and domain basis (for now only IPs)".
Which hints that additional tests for matching incoming connections against configured server profiles were in mind. I would like to request a feature which could allow matching them against domain name if that's possible.
One of the options may be checking client's certificate CN if require_certificate parameter is set to yes.
Thank you!
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.