NSS does not fully implement support for server-side SNI currently. Most of the work has been done upstream, but it is not complete. There are details on the current state of the patches in the upstream bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=360421
We have had requests for SNI support for mod_nss, as it's needed to support name-based virtual hosts in Apache httpd. SNI would also be very useful for Red Hat Identity Management (IPA) and Red Hat Directory Server (389 DS).
We know this is still an upstream feature request. I am moving this to a 7.0 bug. It will be some time before we have any time to try to address this. For now, this RHEL bug will be dormant until the upstream bug has made more progress.
*** Bug 1011652 has been marked as a duplicate of this bug. ***
Comment 12Abhijeet Kasurde
2016-08-09 14:17:40 UTC
Verified using mod_nss ::
# rpm -q mod_nss httpd
mod_nss-1.0.14-3.el7.x86_64
httpd-2.4.6-45.el7.x86_64
Attaching console.log and configuration files used in verifying BZ.
Marking BZ as verified.
Comment 13Abhijeet Kasurde
2016-08-09 14:19:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHSA-2016-2602.html
NSS does not fully implement support for server-side SNI currently. Most of the work has been done upstream, but it is not complete. There are details on the current state of the patches in the upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=360421 We have had requests for SNI support for mod_nss, as it's needed to support name-based virtual hosts in Apache httpd. SNI would also be very useful for Red Hat Identity Management (IPA) and Red Hat Directory Server (389 DS).