[Twisted-web] Dynamic SSL context

[Jp Calderone]

On Wed, 17 Aug 2005 16:17:08 +0200, Marek Habersack <grendel at caudium.net> wrote:
>Hello,
>
>  I am wondering, is it possible with Twisted to delay creating the SSL
>context till the connection time? I would need something like that to
>support virtual hosts on the same interface:port with different SSL certs.

Connection time is too early.  You have to wait until you get the "Host" header to know which cert to pick for a vhosting server.  And by then, it's too late!  HTTP doesn't include a provision for negotiating transport layer security.  Either you use SSL for everything or you use SSL for nothing.

There are some experiments that add STARTTLS-like functionality to HTTP, but as far as I know, none are widely (>0.1% of clients) supported.

Jp