Can't use SNI from the server, or it is not obvious how to do that....

[alcidesv]

There is a field clientUseServerNameIndication in ClientParams, but nothing similar in ServerParams... without this, it is not possible to implement "virtual hosts" in a TLS server.

[vincenthz]

SNI should just be recorded on the server side (just like many other extensions). Then after a succesfull handshake, a server could query the context and act accordingly.

for example, something like:

  case getClientSNI context where
        Nothing -> proceed_to_normal_host
        Just "my.virtual.host1.com" -> proceed_to_my_virtual_host1
         ......          

[kazu-yamamoto]

I cannot find getClientSNI in the source code. Am I missing something?

[vincenthz]

no, it doesn't exist yet, it was a wishful code example

[kazu-yamamoto]

OK.

I think that what users want is setting parameters with which we can specify multiple secret keys and their certificates based on SNI values.

[kazu-yamamoto]

getClientSNI is a part of API now. Let's close this.