thanks for this!

according to CPAN

http://search.cpan.org/~mikem/Net-SSLeay-1.66/lib/Net/SSLeay.pod#Low_level_API:_Server_side_Server_Name_Indication_%28SNI%29_support

the goal can be reached with code like this:

# create default context
my $ctx = Net::SSLeay::CTX_new or die;
Net::SSLeay::CTX_set_cipher_list($ctx, 'ALL');
Net::SSLeay::set_cert_and_key($ctx, 'cert.pem','key.pem') or die;

# create new context for each new hostname
my %hostnames = ();
Net::SSLeay::CTX_set_tlsext_servername_callback(
    $ctx,
    sub {
        my $ssl = shift;
        my $h = Net::SSLeay::get_servername($ssl);
        unless (exists $hostnames{$h}) {
            $hostnames{$h}->{ctx} = Net::SSLeay::CTX_new or die;
            Net::SSLeay::CTX_set_cipher_list($hostnames{$h}->{ctx}, 'A
+LL');
            $hostnames{$h}->{cert} = ... # generate certificate and
            $hostnames{$h}->{key}  = ... # key based on hostname in $h
                                         # and re-use them in future f
+rom hash as below
            Net::SSLeay::set_cert_and_key(
                $hostnames{$h}->{ctx},
                $hostnames{$h}->{cert},
                $hostnames{$h}->{key}
            ) or die;
        }
        Net::SSLeay::set_SSL_CTX($ssl, $hostnames{$h}->{ctx});
    }
);

[download]

but every new cert/key pair generation will use some time.
in my case, the script is a multiplexing server based on IO::Select, so it reads and writes with short parts of data to prevent any long/heavy transfer to block the others.
and each time the new pair is generated the script will block for this time.

is there a way to solve this in non-blocking manner?

thanks!

In reply to Re^2: Dynamic SNI certificates while upgrading to SSL by gr3m1in
in thread Dynamic SNI certificates while upgrading to SSL by gr3m1in

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.