TLS SNI§

Intro§

SNI allows Warpgate to automatically pick the correct certificate for each domain when serving HTTPS.

Configuration§

In the config file, add the http.sni_certificates list:

http:
  certificate: ...
  key: ...
+ sni_certificates:
+ - certificate: other_cert.pem
+   key: other_key.pem
+ - certificate: yet_another_cert.pem
+   key: yet_another_key.pem

The "main" certificate will remain active as a fallback for any requests that do not match domain names known from the SNI certificate list.