From e0da1e73b92b82df69f9c727e5bc172b3532c5fd Mon Sep 17 00:00:00 2001 From: Richard Russon Date: Tue, 2 Aug 2016 10:18:11 +0100 Subject: [PATCH] docs: tls-sni --- doc/manual.xml.head | 107 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 107 insertions(+) diff --git a/doc/manual.xml.head b/doc/manual.xml.head index 4842817ec..d4b6f9764 100644 --- a/doc/manual.xml.head +++ b/doc/manual.xml.head @@ -12412,6 +12412,113 @@ color status brightwhite default 'Mutt: ([^ ]+)' 1 + + TLS-SNI Patch + Negotiate with a server for a TSL/SSL certificate + + + Patch + + + To check if Mutt supports TLS-SNI, look for + patch-tls-sni in the mutt version. + See: . + + + + Dependencies: + mutt-1.6.2 + OpenSSL + + + This patch is part of the NeoMutt Project. + + + + Introduction + + + The TLS-SNI patch adds support for TLS virtual hosting. + If your mail server doesn't support this everything will still work + normally. + + + + TLS supports sending the expected server hostname during the + handshake, via the SNI extension. This can be used to select a + server certificate to issue to the client, permitting + virtual-hosting without requiring multiple IP addresses. + + + + This has been tested against Exim 4.80, which optionally logs SNI + and can perform vhosting. + + + + To verify TLS SNI support by a server, you can use: + + + +openssl s_client -host <imap server> -port <port> -tls1 -servername <imap server> + + + + + + + Muttrc + None + + + + See Also + + + NeoMutt Project + + + + + Known Bugs + None + + + + Credits + + Jeremy Katz katzj@linuxpower.org + Phil Pennock mutt-dev@spodhuis.demon.nl + Richard Russon rich@flatcap.org + + + + -- 2.49.0