Clarify the text a little and use the vhost terminology.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@620635 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/test/make_sni.sh b/test/make_sni.sh
index fcf1d6c5b60f5255a00ac55c9aa022dcff074d31..f9ad6d348c97c48a2d25b0eb9d9df972fecaabfe 100644 (file)
--- a/test/make_sni.sh
+++ b/test/make_sni.sh
@@ -28,11 +28,11 @@ NAMES=${NAMES:-ape nut pear apple banana}
 
 args=`getopt fd:D: $*`
 if [ $? != 0 ]; then
-    echo "Syntax: $0 [-f] [-d outdir] [-D domain ] [two or more server names ]"
+    echo "Syntax: $0 [-f] [-d outdir] [-D domain ] [two or more vhost names ]"
     echo "    -f        Force overwriting of outdir (default is $DIR)"
     echo "    -d dir    Directory to create the SNI test server in (default is $DIR)"
     echo "    -D domain Domain name to use for this test (default is $DOMAIN)"
-    echo "    [names]   List of optional server names (default is $NAMES)"
+    echo "    [names]   List of optional vhost names (default is $NAMES)"
     echo 
     echo "Example:"
     echo "    $0 -D SecureBlogsAreUs.com peter fred mary jane ardy"
@@ -59,7 +59,7 @@ do
 done
 
 if [ $# = 1 ]; then
-    echo "Aborted - just specifing one servername makes no sense for SNI testing. Go wild !"
+    echo "Aborted - just specifing one vhost makes no sense for SNI testing. Go wild !"
     exit 1
 fi
 
@@ -224,23 +224,26 @@ server against it with
 
     .../httpd -f ${DIR}/httpd-sni.conf
 
-and keep an eye on ${DIR}/logs/... Note that you will see an entries 
-like
+and keep an eye on ${DIR}/logs/... When everything 
+is fine you will see an entries like:
 
     Feb 11 16:12:26 2008] [debug] Init: 
         SSL server IP/port overlap: ape.*:443 (httpd-sni.conf:24) vs. jane.*:443 (httpd-sni.conf:42)
 
-and a concluding warning
+for each vhost configured and a concluding warning:
+
     [Mon Feb 11 16:12:26 2008] [warn] Init: 
         Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
 
-If you see an entry like
+HOWEVER - If you see an entry like
 
     [Mon Feb 11 15:41:41 2008] [warn] Init: 
         You should not use name-based virtual hosts in conjunction with SSL!!
 
-then you are either using an OpenSSL which is too old, or you need to ensure that the
-TLS Extensions are compiled into openssl with the 'enable-tlsext' flag.
+then you are either using an OpenSSL which is too old and/or you need to ensure that the
+TLS Extensions are compiled into openssl with the 'enable-tlsext' flag. Once you have
+recompiled or reinstalled OpenSSL with TLS Extensions you will have to recompile mod_ssl
+to allow it to recognize SNI support.
 
 Meanwhile add 'hosts' to your c:\windows\system32\drivers\etc\hosts
 or /etc/hosts file as to point the various URL's to your server: