Page 1 of 1

OpenVPN support for TLS SNI?

Posted: Mon Mar 04, 2013 4:32 pm
by timcross
Is Server Name Indication on anyone's radar? It's supported in OpenSSL and PolarSSL,
and if OpenVPN passed it along it would suddenly be perfect what we're trying to do.
Many thanks in advance for any insight anyone can offer.

Relative OpenVPN noob here, as if you couldn't tell.

Tim Cross
firstname dot lastname at aoterra dot de
AoTerra GmbH
Dresden, Germany

Re: OpenVPN support for TLS SNI?

Posted: Tue Nov 26, 2013 11:48 pm
by PiBa-NL
Would be nice to have. +1 :D

Would like to run OpenVPN TCP 443 behind HAProxy using SNI together with multiple https websites myself. I think that could work nicely.

Re: OpenVPN support for TLS SNI?

Posted: Mon Aug 17, 2015 6:25 pm
by coolaj86
Any update on this? That's exactly what I'm trying to do (HAProxy + SNI + OpenVPN).

I've found a tutorial that suggests it can be done with socat, but I haven't been able to get it to work yet. What I have been able to get to work, however, was using SSH as a SOCKS5 proxy over HTTPS through HAProxy and tunneling OpenVPN through that. I changed the OpenVPN config to unauthenticated / unencrypted to reduce the redundant overhead since SSH provides both of those things.

Re: OpenVPN support for TLS SNI?

Posted: Tue Jul 21, 2020 11:19 am
by Akito
Sad thread.

What's the status of this in 2020? Any documentation on this feature?