OpenVPN support for TLS SNI?

[timcross]

Is Server Name Indication on anyone's radar? It's supported in OpenSSL and PolarSSL,
and if OpenVPN passed it along it would suddenly be perfect what we're trying to do.
Many thanks in advance for any insight anyone can offer.

Relative OpenVPN noob here, as if you couldn't tell.

Tim Cross
firstname dot lastname at aoterra dot de
AoTerra GmbH
Dresden, Germany

[PiBa-NL]

Would be nice to have. +1

Would like to run OpenVPN TCP 443 behind HAProxy using SNI together with multiple https websites myself. I think that could work nicely.

[coolaj86]

Any update on this? That's exactly what I'm trying to do (HAProxy + SNI + OpenVPN).

I've found a tutorial that suggests it can be done with socat, but I haven't been able to get it to work yet. What I have been able to get to work, however, was using SSH as a SOCKS5 proxy over HTTPS through HAProxy and tunneling OpenVPN through that. I changed the OpenVPN config to unauthenticated / unencrypted to reduce the redundant overhead since SSH provides both of those things.

[Akito]

Sad thread.

What's the status of this in 2020? Any documentation on this feature?