Hi guys,

I have been wondering, does the following setting support SNI (Server Name Indication) ?

Nginx 0.7.65
OpenSSL 0.9.8k

nginx -V: indicates it has SNI enabled.
openssl version -a: I don't know which parameter to check, but I am pretty sure openssl 0.9.8j+ has SNI support compiled by default.

but when I try to add different SSL certificates, only one certificate is passed for all vhosts (ie. different domains), which of course produce certificate mis-match error.

I use Firefox 3.6.3, which should support SNI natively.
I have also done the same thing with apache2 before, which works on firefox.

I have no idea what I am missing from nginx vhost conf. file.

listen 443;
ssl on;
ssl_certificate /etc/nginx/ssl/www.domain.tld.crt;
ssl_certificate_key /etc/nginx/ssl/www.domain.tld.key;

Any ideas?

just a quick update for ppl interested:
It does work! With default package! No compile headache!
though you should make sure you have correct setting for each vhost (ie. server {...} in nginx)

ref: http://wiki.nginx.org/NginxHttpSslModule