If multiple domain names are served, multiple certificates may be needed and chosen dynamically. OpenSSL provides a way to define a servername callback that is called when the server receives the servername before handshake, so the application can choose the appropriate certificate.
I forked sslrelay to add this feature (and others) because I need it to implement a proxy that generates and stores alternative certificates on the fly.
My fork: https://git.zoai.re/tuxmain/sslrelay
My proxy using the fork (see record.rs): https://git.zoai.re/tuxmain/netreplay
Would you be interested in upstreaming? I can make a PR.
If multiple domain names are served, multiple certificates may be needed and chosen dynamically. OpenSSL provides a way to define a servername callback that is called when the server receives the servername before handshake, so the application can choose the appropriate certificate.
I forked sslrelay to add this feature (and others) because I need it to implement a proxy that generates and stores alternative certificates on the fly.
My fork: https://git.zoai.re/tuxmain/sslrelay
My proxy using the fork (see record.rs): https://git.zoai.re/tuxmain/netreplay
Would you be interested in upstreaming? I can make a PR.