SNI technology
- Category : SSL Installation
- Posted on : Jul 17, 2021
- Views : 1,414
- By : HostSEO
The previous version of TLS which we used with all our servers didnâ$™t recognize HTTPS requests that contained a domain name. It only worked correctly only if an IP address was â$œaskedâ$. Thus, it was a requirement to have a dedicated IP for each domain that used a secured connection.
   Starting from the cPanel version 11.38 and higher, we are able to use SNI.
Server Name Indication (SNI) is an extension to the TLS protocol that indicates what hostname the client is attempting to connect.
This allows a server to present multiple certificates on the same IP address and port number and hence, allows multiple secure (HTTPS) websites (or any other service over TLS).
 However, unfortunately, there are a few issues that might appear:
SNI is incompatible with some old versions of web browsers.*- SNI does not work on Windows XP + any version Internet Explorer (6,7,8,9)
- Internet Explorer 6 or earlier
- Safari on Windows XP
- BlackBerry Browser
- Windows Mobile up to 6.5
- Nokia Browser for Symbian at least on Series60
- Opera Mobile for Symbian at least on Series60
The website will still be available via HTTPS, but a certificate mismatch error will appear.
Ways to resolve the issue: Use a different browser to access the website. Also, if the visitor agrees to use another certificate with an incompatible browser, the requested site will open up normally via HTTPS, but a different certificate will be used to establish a secured connection. On the contrary, all the visitors with incompatible browsers will see a warning message.
If you try to gain HTTPS access using a server IP address, issues might appear.
Using the IP address, the client will receive our "default" certificate which is set for each IP on the server (e.g., serverX.web-hosting.com) and reach the first site hosted on this IP, if an HTTPS request does not have the name of the site specified.
*The list of browsers that support SNI:
- Internet Explorer 7 or later, on Windows Vista or higher
- Mozilla Firefox 2.0 or later
- Opera 8.0 (2005) or later (the TLS 1.1 protocol must be enabled)
- Opera Mobile at least version 10.1 beta on Android
- Google Chrome (Vista or higher, XP on Chrome 6 or newer, OS X 10.5.7 or higher on Chrome 5.0.342.1 or newer)
- Safari 3.0 or later (Mac OS X 10.5.6 or higher and Windows Vista or higher)
- Konqueror/KDE 4.7 or later
- MobileSafari in Apple iOS 4.0 or later
- Android default browser on Honeycomb (v3.x) or newer
- Windows Phone 7
- MicroB on Maemo
- Odyssey on MorphO
Categories
- cPanel Question 47
- cPanel Software Management 29
- cPanel Tutorials 13
- Development 29
- Domain 13
- General 19
- Linux Helpline (Easy Guide) 156
- Marketing 47
- MySQL Question 13
- News 2
- PHP Configuration 14
- SEO 4
- SEO 42
- Server Administration 84
- SSL Installation 54
- Tips and Tricks 24
- VPS 3
- Web Hosting 44
- Website Security 22
- WHM questions 13
- WordPress 148
Subscribe Now
10,000 successful online businessmen like to have our content directly delivered to their inbox. Subscribe to our newsletter!Archive Calendar
Sat | Sun | Mon | Tue | Wed | Thu | Fri |
---|---|---|---|---|---|---|
1 | ||||||
2 | 3 | 4 | 5 | 6 | 7 | 8 |
9 | 10 | 11 | 12 | 13 | 14 | 15 |
16 | 17 | 18 | 19 | 20 | 21 | 22 |
23 | 24 | 25 | 26 | 27 | 28 | 29 |
30 |
Recent Articles
-
Posted on : Sep 17
-
Posted on : Sep 10
-
Posted on : Aug 04
-
Posted on : Apr 01
Tags
- ts
- myisam
- vpn
- sql
- process
- kill
- tweak
- server load
- attack
- ddos mitigation
- Knowledge
- layer 7
- ddos
- webmail
- DMARC
- Development
- nginx
- seo vpn
- Hosting Security
- wireguard
- innodb
- exim
- smtp relay
- smtp
- VPS Hosting
- cpulimit
- Plesk
- Comparison
- cpu
- encryption
- WHM
- xampp
- sysstat
- optimize
- cheap vpn
- php-fpm
- mariadb
- apache
- Small Business
- Error
- Networking
- VPS
- SSD Hosting
- Link Building
- centos
- DNS
- optimization
- ubuntu