cablehead/http-sh

tls: add support for additional PEMs / hosts

Opened this issue · 0 comments

It should be possible to support TLS for multiple host names / PEM keys. The SNI from the TLS handshake should be used to select the right certs, key pair.

https://docs.rs/rustls/latest/rustls/server/struct.ResolvesServerCertUsingSni.html

Not a huge priority as it's possible to use bundled SAN certificates to support more than one host with a single private key.