[asterisk-dev] summary - TLS support for HTTP, AMI and more

[Johansson Olle E]

>
> --- SERVER CERTIFICATE ---
>
> At the moment, the code that reads the server's certificate is
> within function ssl_setup(), and the code above is written assuming
> only one certificate for the whole server, accessible from the
> variable ssl_ctx. It is not difficult to let each service use a
> different certificate. As pointed out by Klaus Darilion,
> let the server pick the certificate depending on the request
> (useful for the equivalent of 'virtual domains') requires some
> additional features ("server name" TLS extension) which i
> don't know how to implement.

And, as said before, this needs to be coordinated with the
current handling and initialization of RSA keys for IAX2.

Possibly also, adding certificate handling to IAX2...

/O